- Update to 1.20.2 - Upgrade to 1.18.2 release - Fix crash when modem goes away during a connection attempt (rh #1936416) - Rebuild to fix multilib conflicts (rh #1853161) - Fix race condition when cancelling a flash operation (rh #1758128) - Update to 1.10.8 release - Update to 1.10.6 release - Update to 1.10.2 release (rh #1543498) - Update to 1.10.2 release (rh #1543498) - Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031) - Update to 1.10.0 release - Update to 1.20.2 - Upgrade to 1.18.2 release - Fix crash when modem goes away during a connection attempt (rh #1936416) - Rebuild to fix multilib conflicts (rh #1853161) - Fix race condition when cancelling a flash operation (rh #1758128) - Update to 1.10.8 release - Update to 1.10.6 release - Update to 1.10.2 release (rh #1543498) - Update to 1.10.2 release (rh #1543498) - Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031) - Update to 1.10.0 release - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - unblock autoconnect of profile on reapply (rh #2207690) - fix reading infiniband p-key from ifcfg files (rh #2209164) - don't fail when the IPv6 link-local address is removed (rh #2209353) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - cloud-setup: fix terminating in the middle of reconfiguration (rh #2221903) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - manager: allow controller activation if device is deactivating (RHEL-5119) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Correctly update DNS changes retrieved from DHCPv4 (RHEL-8423) - Fix CVE-2026-10805 (RHEL-191622) - device: don't disable IPv6 in stage3 on reapply (RHEL-91479) - cloud-setup: azure: ensure that primary address is placed first (RHEL-69462) - vpn: fix routing rules support in vpn conenctions (RHEL-73052) - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73051) - Rebuild to use the right tag - Use /etc/hosts for hostname resolution (RHEL-53200) - Suppress NetworkManager's harmless warning when IPv6 is disabled at kernel level (RHEL-10450) - Fix matching existing connection by UUID on restart (RHEL-5119) - device: do not set MAC address on iface with index <=0 (RHEL-16008) - Dispatch "dns-change" event (RHEL-10195) - Resolve issues found by rpmdiff - add explicit Requires: on subpackages to avoid the need to test interoperability between the various combinations of old and new subpackages - add code to restore binary compatibility in libIPMIlanserv.so and libOpenIPMIcmdlang.so broken in 2.0.31, while keeping compatibility with 2.0.31 as well. - fix collectd-ipmi crash (#1990072) - New upstream release 2.0.31 (#1923044) - New upstream release 2.0.29 (#1796588) - New upstream release 2.0.27 - Rebuild for Net-SNMP - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream release 2.0.25 (#1568194) - Replace Python2 with Python3 - Drop OpenIPMI-python2 and set it as Obsolete - Introduce new OpenIPMI-python3 package - use ldconfig macros - remove old systemd dependencies - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Resolve issues found by rpmdiff - add explicit Requires: on subpackages to avoid the need to test interoperability between the various combinations of old and new subpackages - add code to restore binary compatibility in libIPMIlanserv.so and libOpenIPMIcmdlang.so broken in 2.0.31, while keeping compatibility with 2.0.31 as well. - fix collectd-ipmi crash (#1990072) - New upstream release 2.0.31 (#1923044) - New upstream release 2.0.29 (#1796588) - New upstream release 2.0.27 - Rebuild for Net-SNMP - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream release 2.0.25 (#1568194) - Replace Python2 with Python3 - Drop OpenIPMI-python2 and set it as Obsolete - Introduce new OpenIPMI-python3 package - use ldconfig macros - remove old systemd dependencies - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Resolve issues found by rpmdiff - add explicit Requires: on subpackages to avoid the need to test interoperability between the various combinations of old and new subpackages - add code to restore binary compatibility in libIPMIlanserv.so and libOpenIPMIcmdlang.so broken in 2.0.31, while keeping compatibility with 2.0.31 as well. - fix collectd-ipmi crash (#1990072) - New upstream release 2.0.31 (#1923044) - New upstream release 2.0.29 (#1796588) - New upstream release 2.0.27 - Rebuild for Net-SNMP - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream release 2.0.25 (#1568194) - Replace Python2 with Python3 - Drop OpenIPMI-python2 and set it as Obsolete - Introduce new OpenIPMI-python3 package - use ldconfig macros - remove old systemd dependencies - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Resolve issues found by rpmdiff - add explicit Requires: on subpackages to avoid the need to test interoperability between the various combinations of old and new subpackages - add code to restore binary compatibility in libIPMIlanserv.so and libOpenIPMIcmdlang.so broken in 2.0.31, while keeping compatibility with 2.0.31 as well. - fix collectd-ipmi crash (#1990072) - New upstream release 2.0.31 (#1923044) - New upstream release 2.0.29 (#1796588) - New upstream release 2.0.27 - Rebuild for Net-SNMP - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream release 2.0.25 (#1568194) - Replace Python2 with Python3 - Drop OpenIPMI-python2 and set it as Obsolete - Introduce new OpenIPMI-python3 package - use ldconfig macros - remove old systemd dependencies - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - Latest upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Add metainfo file to show this font in gnome-software - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 3.001 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - fix RPATH rpminspect reports - actually apply an included patch - preserve failed setfacl return code (RHEL-3909) - new upstream release - update link to POSIX.1e draft in acl(5) man page (#1510527) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473845) - update URL of the upstream source tarball - setfacl.1: document the meaning of '-' in perms (#1337039) - avoid failure of %check when building as root (#1085389) - apply patches automatically to ease maintenance - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111) - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216) - fix RPATH rpminspect reports - actually apply an included patch - preserve failed setfacl return code (RHEL-3909) - new upstream release - update link to POSIX.1e draft in acl(5) man page (#1510527) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473845) - update URL of the upstream source tarball - Switch to using '%autopatch -p1' and eliminate long list of '%patch<N> -p1 -b <name>'. - Backport 0b03aa8ebd7a ("CXL 2.0: CEDT: Add new CEDT table"). - Backport b980be9b7fd3 ("CXL 2.0: CEDT: Add table and subtable dumping"). - Backport 187e2f286f50 ("CXL 2.0: CEDT: Add template"). - Backport 1e6dded267b1 ("iASL/TableCompiler: Add compilation support for CEDT table."). - Backport 5ace82441a34 ("Add defines for the CXL Host Bridge Structure (CHBS)"). - Backport 699fc72e5693 ("Add the CFMWS structure definition to the CEDT table"). - Backport ec39d05939c7 ("Disassembler: add missing strings to decode subtable types"). - Backport 19b11f91660b ("Add the subtable CFMWS to the CEDT table"). - Backport d9798f5275bb ("Fix Compile issue with CEDT and add template"). - Backport 0914618b553d ("Automated cleanup; No functional changes"). - Backport 7021087eedb0 ("Remove a duplicate of ACPI_SIG_CEDT"). - Add in OSCI testing to the build - Resolves: rhbz#1682381 - Add in man page for acpiexamples. So that the man page makes some sense, also copy the source code used for acpiexamples to the doc directory for this package. Closes BZ#1611145. - Add in the converterSample.asl file from the misc tests. Clean up the run-misc-tests.sh script, too, to make it more robust by simplifying the work done. - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Update to 20180629 source tree, including patch refeshes. Closes BZ#1584923 - Includes upstream fix for #1592971 (iasl segfault). - Update to 20180531 source tree, including patch refeshes. Closes BZ#1584923 - %pre and %post scriptlets fail -- stupid thinko where I inadvertently tested for alternatives not existing, vs existing - Update to 20180508 source tree, including patch refeshes. Closes BZ#1544048 - acpidump/acpixtract no longer have alternatives, so remove the scriptlets that maintain them and just install them directly; we do leave the pre- and post- scriptlets to remove the alternatives for now. Closes BZ#1576970 - Typo: OPT_LDFLAGS, not OPT_LDLAGS in the build section. Closes BZ#1560542 - Update to 20180427 source tree, including patch refeshes. Closes BZ#1544048 - Update to 20180313 source tree, including patch refeshes. Closes BZ#1544048 - Update to upstream release 0.9.2 Resolves: rhbz#1991619, rhbz#2111348, rhbz#2133838 - [RFE] Allow adcli to create AD user with password as well as set or reset existing user password [#1952828] - [RFE] add option to populate "managed by" computer attribute [#1690920] - Add missing patch for [#1769644] - [RFE] Adcli and Realm Error Code Optimization Request [#1889386] - [RFE] adcli should allow to modify DONT_EXPIRE_PASSWORD attribute [#1769644] - Typo in CREATE A SERVICE ACCOUNT section of man page of adcli [#1906303] - Add --use-ldaps option to adcli update as well [#1883467] - Cannot join a pre-staged Computer Account on AD in Custom OU using Delegated user [#1734764] - missing documentation for required AD rights for adcli join and net join [#1852080] - [RFE] Add new mode to just create an AD account to be able to connect to LDAP [#1854112] - Improve "-C" option description in man page even more [#1791545] - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1806260] - No longer able to delete computer from AD using adcli [#1846882] - adcli: presetting $computer in $domain domain failed: Cannot set computer password: Authentication error [#1846878] - Typo in adcli update --help option [#1791611] - Manpage and help does not explain the use of "-C" option [#1791545] - adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1762420] - adcli update --add-samba-data does not work as expected [#1745931] - Issue is that with arcfour-hmac as first encryption type [#1745932] - [RFE] enhancement adcli to set description attribute and to show all AD attributes [#1737342] - Update to upstream release 0.9.2 Resolves: rhbz#1991619, rhbz#2111348, rhbz#2133838 - [RFE] Allow adcli to create AD user with password as well as set or reset existing user password [#1952828] - [RFE] add option to populate "managed by" computer attribute [#1690920] - Add missing patch for [#1769644] - [RFE] Adcli and Realm Error Code Optimization Request [#1889386] - [RFE] adcli should allow to modify DONT_EXPIRE_PASSWORD attribute [#1769644] - Typo in CREATE A SERVICE ACCOUNT section of man page of adcli [#1906303] - Add --use-ldaps option to adcli update as well [#1883467] - Cannot join a pre-staged Computer Account on AD in Custom OU using Delegated user [#1734764] - missing documentation for required AD rights for adcli join and net join [#1852080] - [RFE] Add new mode to just create an AD account to be able to connect to LDAP [#1854112] - Improve "-C" option description in man page even more [#1791545] - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1806260] - No longer able to delete computer from AD using adcli [#1846882] - adcli: presetting $computer in $domain domain failed: Cannot set computer password: Authentication error [#1846878] - Typo in adcli update --help option [#1791611] - Manpage and help does not explain the use of "-C" option [#1791545] - adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1762420] - adcli update --add-samba-data does not work as expected [#1745931] - Issue is that with arcfour-hmac as first encryption type [#1745932] - [RFE] enhancement adcli to set description attribute and to show all AD attributes [#1737342] - Initial build for AlmaLinux - Added updated index.html to sources. - Updated prep and install sections. - Update tarball - Initial build for AlmaLinux - Update index.html to fix link on the logo. - Added updated index.html to sources. - Updated prep and install sections. - Update tarball - Initial build for AlmaLinux - 8.10 stable release - 8.9 stable release - Split AlmaLinux OS 8 GPG public keys to fix microdnf - Add new AlmaLinux OS 8 GPG key - 8.8 stable release - Fixed ownership of dirs (albz#328) - Add stream dnf variable for CentOS SIG repos compatibility - 8.7 stable release - Add SAP and SAPHANA repos - Add more compatibility variables to /etc/os-release - Bump release - Give a bound to hostname buffer copy - Resolves: RHEL-5636 - rebuilt - Increase hostname buffer - MAC addresses are not shown properly (#1778313) - make sure arpwatch starts after network devices are up (#1551431) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix FTBFS (#1423238) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Add preceding newline to delimiter in at-3.1.20-shell.patch Resolves: rhbz#2070450 - log the jobs being run - Drop "BuildRequires: fileutils /etc/init.d" - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - improve the wrong_format patch, also rename it to correct name - the ownership of the spool directory should be root as at is configured with daemon username root - document the -n option - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix the POSIX timers support (#1436523) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild * Update the s390 subpackages: - The base pakcage is now optimized to z13 - New subpackage is introduced: z14 - All remaining subpackages for s390 are being deprecated - Clean up of the spec file - Some commented out subpackages were removed form the spec - These subpackages were not built/shipped -> no change from the users point of view Resolves: #1782560 Resolves: #1780286 Resolves: #1782561 * Fix covscan related issues (getri function) Related: #1602445 * Pass all required compiler/linker flags - use annobin plugin - generate assembler build notes Related: #1624098 - Pass RPM_LD_FLAGS to linker - Add gcc to buildrequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for GCC8 - Update to new 3.10.3 stable version. - Remove ppc64/ppc64le related patches. - All packages now use -A option to specify the target CPU/Architecture instead of sed substitutions and auto detection. The packages should now be less dependant on the builder machine used. - Base package for each architecture should now be configured to be compatible with the most basic machine of given type. - In addittion to base package, added some optimized packages for more advanced CPUs for most architectures. - Dropped sse2/sse3 subpackages for ix86 - rebuild again for fixed lapack - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Update the s390 subpackages: - The base pakcage is now optimized to z13 - New subpackage is introduced: z14 - All remaining subpackages for s390 are being deprecated - Clean up of the spec file - Some commented out subpackages were removed form the spec - These subpackages were not built/shipped -> no change from the users point of view Resolves: #1782560 Resolves: #1780286 Resolves: #1782561 * Fix covscan related issues (getri function) Related: #1602445 * Pass all required compiler/linker flags - use annobin plugin - generate assembler build notes Related: #1624098 - Pass RPM_LD_FLAGS to linker - Add gcc to buildrequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for GCC8 - Update to new 3.10.3 stable version. - Remove ppc64/ppc64le related patches. - All packages now use -A option to specify the target CPU/Architecture instead of sed substitutions and auto detection. The packages should now be less dependant on the builder machine used. - Base package for each architecture should now be configured to be compatible with the most basic machine of given type. - In addittion to base package, added some optimized packages for more advanced CPUs for most architectures. - Dropped sse2/sse3 subpackages for ix86 - rebuild again for fixed lapack - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Update the s390 subpackages: - The base pakcage is now optimized to z13 - New subpackage is introduced: z14 - All remaining subpackages for s390 are being deprecated - Clean up of the spec file - Some commented out subpackages were removed form the spec - These subpackages were not built/shipped -> no change from the users point of view Resolves: #1782560 Resolves: #1780286 Resolves: #1782561 * Fix covscan related issues (getri function) Related: #1602445 * Pass all required compiler/linker flags - use annobin plugin - generate assembler build notes Related: #1624098 - Pass RPM_LD_FLAGS to linker - Add gcc to buildrequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for GCC8 - Update to new 3.10.3 stable version. - Remove ppc64/ppc64le related patches. - All packages now use -A option to specify the target CPU/Architecture instead of sed substitutions and auto detection. The packages should now be less dependant on the builder machine used. - Base package for each architecture should now be configured to be compatible with the most basic machine of given type. - In addittion to base package, added some optimized packages for more advanced CPUs for most architectures. - Dropped sse2/sse3 subpackages for ix86 - rebuild again for fixed lapack - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild * Update the s390 subpackages: - The base pakcage is now optimized to z13 - New subpackage is introduced: z14 - All remaining subpackages for s390 are being deprecated - Clean up of the spec file - Some commented out subpackages were removed form the spec - These subpackages were not built/shipped -> no change from the users point of view Resolves: #1782560 Resolves: #1780286 Resolves: #1782561 * Fix covscan related issues (getri function) Related: #1602445 * Pass all required compiler/linker flags - use annobin plugin - generate assembler build notes Related: #1624098 - Pass RPM_LD_FLAGS to linker - Add gcc to buildrequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for GCC8 - Update to new 3.10.3 stable version. - Remove ppc64/ppc64le related patches. - All packages now use -A option to specify the target CPU/Architecture instead of sed substitutions and auto detection. The packages should now be less dependant on the builder machine used. - Base package for each architecture should now be configured to be compatible with the most basic machine of given type. - In addittion to base package, added some optimized packages for more advanced CPUs for most architectures. - Dropped sse2/sse3 subpackages for ix86 - rebuild again for fixed lapack - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - temporarily provide attr/xattr.h symlink until users are migrated (#1601482) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473853) - apply patches automatically to ease maintenance - update URL of the upstream source tarball - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - update project URL (#1418475) - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121) - fix couple of rpminspect warnings - temporarily provide attr/xattr.h symlink until users are migrated (#1601482) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473853) - apply patches automatically to ease maintenance - update URL of the upstream source tarball - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates resolves: rhbz#1767054 - move audit rules to shared data directory resolves: rhbz#1746018 - Breakup 30-ospp-v42.rules into more granular files resolves: rhbz#1740798 - auditctl(8) needs clarification for backlog_limit resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Allow defining rules for /usr/lib/modules dir Resolves: RHEL-59013 - augenrules: fix return code if immutable mode is set Resolves: RHEL-40109 - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates resolves: rhbz#1767054 - move audit rules to shared data directory resolves: rhbz#1746018 - Breakup 30-ospp-v42.rules into more granular files resolves: rhbz#1740798 - auditctl(8) needs clarification for backlog_limit resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Allow defining rules for /usr/lib/modules dir Resolves: RHEL-59013 - augenrules: fix return code if immutable mode is set Resolves: RHEL-40109 - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates resolves: rhbz#1767054 - move audit rules to shared data directory resolves: rhbz#1746018 - Breakup 30-ospp-v42.rules into more granular files resolves: rhbz#1740798 - auditctl(8) needs clarification for backlog_limit resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Allow defining rules for /usr/lib/modules dir Resolves: RHEL-59013 - augenrules: fix return code if immutable mode is set Resolves: RHEL-40109 - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates resolves: rhbz#1767054 - move audit rules to shared data directory resolves: rhbz#1746018 - Breakup 30-ospp-v42.rules into more granular files resolves: rhbz#1740798 - auditctl(8) needs clarification for backlog_limit resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Allow defining rules for /usr/lib/modules dir Resolves: RHEL-59013 - augenrules: fix return code if immutable mode is set Resolves: RHEL-40109 - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates resolves: rhbz#1767054 - move audit rules to shared data directory resolves: rhbz#1746018 - Breakup 30-ospp-v42.rules into more granular files resolves: rhbz#1740798 - auditctl(8) needs clarification for backlog_limit resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Allow defining rules for /usr/lib/modules dir Resolves: RHEL-59013 - augenrules: fix return code if immutable mode is set Resolves: RHEL-40109 - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Fix parsing of semanage.conf ignoredirs resolves: rhbz#1931058 - Fix parsing of mke2fs.conf files resolves: rhbz#1807010 - Ssh: parse Match options (RHBZ#1716359) - Fix completion with special characters in augtool. (RHBZ#1232224) - Krb5: improve handling of [dbmodules]; allow include/includedir directives everywhere (RHBZ#1798486) - Systemd: improve parsing of quoted variables of Environment (RHBZ#1798922) - Rsyslog: support multiple actions in filters and selectors (RHBZ#1660884) - Grub: handle '+' in kernel command line options (RHBZ#1769314) - Disable static libraries, not needed in RHEL. - New upstream release (RHBZ#1709416) * Fstab: allow leading whitespaces (RHBZ#1671950) - Add simple tests (RHBZ#1653994) - Anaconda: new lens (RHBZ#1657192) - Fix parsing of semanage.conf ignoredirs resolves: rhbz#1931058 - Fix parsing of mke2fs.conf files resolves: rhbz#1807010 - Ssh: parse Match options (RHBZ#1716359) - Fix completion with special characters in augtool. (RHBZ#1232224) - Krb5: improve handling of [dbmodules]; allow include/includedir directives everywhere (RHBZ#1798486) - Systemd: improve parsing of quoted variables of Environment (RHBZ#1798922) - Rsyslog: support multiple actions in filters and selectors (RHBZ#1660884) - Grub: handle '+' in kernel command line options (RHBZ#1769314) - Disable static libraries, not needed in RHEL. - New upstream release (RHBZ#1709416) * Fstab: allow leading whitespaces (RHBZ#1671950) - Add simple tests (RHBZ#1653994) - Anaconda: new lens (RHBZ#1657192) - Fix Japanese translations (RHBZ #2216755) - Update translations (RHBZ #2189557) - Do not prompt for password twice when changing password of local user (RHBZ #2179607) - Rebase to 1.2.6 (RHBZ #2142805) - Update translations (RHBZ #2139696) - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151140) - Rebase to 1.2.5 (RHBZ #2080238) - sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325) - backup-restore now works correctly (RHBZ #2066535) - add with-subid to sssd profile (RHBZ #2063750) - Update translations (RHBZ #1961625) - try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070) - Need to localize the description of --debug option in authselect show (RHBZ #1970408) - Rebase to authselect-1.2.2 (RHBZ #1892761) - Update translations (RHBZ #1820533) - Rebase to authselect-1.2.1 (RHBZ #1810471) - CLI commands are now correctly translated (RHBZ #1816009) - Remove unsupported features from sssd profile description (RHBZ #1830251) - add `with-files-access-provider` to sssd profile (RHBZ #1734094) - switch to pam_usertype module (RHBZ #1773567) - fix typo in sssd profile description (RHBZ #1787638) - add minimal profile (RHBZ #1654018) - Update translations (RHBZ #1689973) - Rebase to authselect-1.1 (RHBZ #1685516) - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103) - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397) - Update translations (RHBZ #1689973) - Fix Japanese translations (RHBZ #2216755) - Update translations (RHBZ #2189557) - Do not prompt for password twice when changing password of local user (RHBZ #2179607) - Rebase to 1.2.6 (RHBZ #2142805) - Update translations (RHBZ #2139696) - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151140) - Rebase to 1.2.5 (RHBZ #2080238) - sssd profile with-smartcard no longer prevents local users from accessing cron (RHBZ #2070325) - backup-restore now works correctly (RHBZ #2066535) - add with-subid to sssd profile (RHBZ #2063750) - Update translations (RHBZ #1961625) - try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070) - Need to localize the description of --debug option in authselect show (RHBZ #1970408) - Rebase to authselect-1.2.2 (RHBZ #1892761) - Update translations (RHBZ #1820533) - Rebase to authselect-1.2.1 (RHBZ #1810471) - CLI commands are now correctly translated (RHBZ #1816009) - Remove unsupported features from sssd profile description (RHBZ #1830251) - add `with-files-access-provider` to sssd profile (RHBZ #1734094) - switch to pam_usertype module (RHBZ #1773567) - fix typo in sssd profile description (RHBZ #1787638) - add minimal profile (RHBZ #1654018) - Update translations (RHBZ #1689973) - Rebase to authselect-1.1 (RHBZ #1685516) - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103) - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397) - Update translations (RHBZ #1689973) - RHEL-18035 - SIGSEGV using hierarchical map entries on reload with autofs-5.1.4-109 - fix get parent multi-mount check in try_remount(). - fix deadlock in remount. - Resolves: RHEL-18035 - RHEL-7997 - multi mount detection fails for share with blank+dash causing SEGV crash -fix multi-mount check. -Resolves: RHEL-7997 - RHEL-12369 - autofs attempts to mount nonexistant ".hidden" filesystems - update patch "allow -null map in indirect maps". - Resolves: RHEL-12369 - bz2232402 - autofs attempts to mount nonexistant ".hidden" filesystems - allow -null map in indirect maps. - Resolves: rhbz#2232402 - bz2213267 - filesystems mount and expire immediately - fix expire retry looping. - Resolves: rhbz#2213267 - bz2216877 - When looking up included maps, sometimes autofs does not consult all the included files in order - fix the "fix incorrect matching of cached wildcard key" patch. - Related: rhbz#2216877 - bz2216877 - When looking up included maps, sometimes autofs does not consult all the included files in order - fix incorrect matching of cached wildcard key - Resolves: rhbz#2216877 - bz2214444 - The sss lookup modules handles error return incorrectly in some cases - fix some sss error return cases. - Resolves: rhbz#2214444 - bz2207801 - amd map format netgoup selector function not working - fix date for revision 104 changelog entry. - fix use_ignore_mount_option description. - include addtional log info for mounts. - fix amd selector function matching. - get rid entry thid field. - continue expire immediately after submount check. - add buffer length checks to autofs mount_mount(). - eliminate realpath from mount of submount. - eliminate root param from autofs mount and umount. - remove redundant fstat from do_mount_direct(). - get rid of strlen call in handle_packet_missing_direct(). - remove redundant stat call in lookup_ghost(). - set mapent dev and ino before adding to index. - change to use printf functions in amd parser. - dont call umount_subtree_mounts() on parent at umount. - dont take parent source lock at mount shutdown. - eliminate buffer usage from handle_mounts_cleanup(). - fix possible use after free in handle_mounts_exit(). - make submount cleanup the same as top level mounts. - eliminate some more alloca usage. - add soucre parameter to module functions. - add ioctlfd open helper. - make open files limit configurable. - Resolves: rhbz#2207801 - bz2208408 - autofs fails to start with combination of +auto.master and local direct map lookups after upgrading to 5.1.4-93.el8 - fix memory leak in sasl_do_kinit() (Coverity). - fix fix mount tree startup reconnect. - Resolves: rhbz#2208408 - RHEL-61670 - sporadic autofs daemon segfaults - fix submount shutdown race. - RHEL-52402 - Sporadic mount failures with amd program maps on RHEL8 - fix amd external mount error handling. - fix amd external mount mount handling. - don't free ext mount if mounted. - refactor amd function do_program_mount(). - refactor umount_amd_ext_mount(). - add flags argument to amd do_program_mount(). - Resolves: RHEL-61670 RHEL-52402 - RHEL-18035 - SIGSEGV using hierarchical map entries on reload with autofs-5.1.4-109 - fix get parent multi-mount check in try_remount(). - fix deadlock in remount. - Resolves: RHEL-18035 - RHEL-7997 - multi mount detection fails for share with blank+dash causing SEGV crash -fix multi-mount check. -Resolves: RHEL-7997 - RHEL-12369 - autofs attempts to mount nonexistant ".hidden" filesystems - update patch "allow -null map in indirect maps". - Resolves: RHEL-12369 - bz2232402 - autofs attempts to mount nonexistant ".hidden" filesystems - allow -null map in indirect maps. - Resolves: rhbz#2232402 - bz2213267 - filesystems mount and expire immediately - fix expire retry looping. - Resolves: rhbz#2213267 - bz2216877 - When looking up included maps, sometimes autofs does not consult all the included files in order - fix the "fix incorrect matching of cached wildcard key" patch. - Related: rhbz#2216877 - bz2216877 - When looking up included maps, sometimes autofs does not consult all the included files in order - fix incorrect matching of cached wildcard key - Resolves: rhbz#2216877 - bz2214444 - The sss lookup modules handles error return incorrectly in some cases - fix some sss error return cases. - Resolves: rhbz#2214444 - bz2207801 - amd map format netgoup selector function not working - fix date for revision 104 changelog entry. - fix use_ignore_mount_option description. - include addtional log info for mounts. - fix amd selector function matching. - get rid entry thid field. - continue expire immediately after submount check. - add buffer length checks to autofs mount_mount(). - eliminate realpath from mount of submount. - eliminate root param from autofs mount and umount. - remove redundant fstat from do_mount_direct(). - get rid of strlen call in handle_packet_missing_direct(). - remove redundant stat call in lookup_ghost(). - set mapent dev and ino before adding to index. - change to use printf functions in amd parser. - dont call umount_subtree_mounts() on parent at umount. - dont take parent source lock at mount shutdown. - eliminate buffer usage from handle_mounts_cleanup(). - fix possible use after free in handle_mounts_exit(). - make submount cleanup the same as top level mounts. - eliminate some more alloca usage. - add soucre parameter to module functions. - add ioctlfd open helper. - make open files limit configurable. - Resolves: rhbz#2207801 - RHEL-72524 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount - fix deadlock in master_notify_submount(). -Resolves: RHEL-72524 - RHEL-61670 - sporadic autofs daemon segfaults - fix submount shutdown race. - RHEL-52402 - Sporadic mount failures with amd program maps on RHEL8 - fix amd external mount error handling. - fix amd external mount mount handling. - don't free ext mount if mounted. - refactor amd function do_program_mount(). - refactor umount_amd_ext_mount(). - add flags argument to amd do_program_mount(). - Resolves: RHEL-61670 RHEL-52402 - RHEL-18035 - SIGSEGV using hierarchical map entries on reload with autofs-5.1.4-109 - fix get parent multi-mount check in try_remount(). - fix deadlock in remount. - Resolves: RHEL-18035 - RHEL-7997 - multi mount detection fails for share with blank+dash causing SEGV crash -fix multi-mount check. -Resolves: RHEL-7997 - RHEL-12369 - autofs attempts to mount nonexistant ".hidden" filesystems - update patch "allow -null map in indirect maps". - Resolves: RHEL-12369 - bz2232402 - autofs attempts to mount nonexistant ".hidden" filesystems - allow -null map in indirect maps. - Resolves: rhbz#2232402 - bz2213267 - filesystems mount and expire immediately - fix expire retry looping. - Resolves: rhbz#2213267 - bz2216877 - When looking up included maps, sometimes autofs does not consult all the included files in order - fix the "fix incorrect matching of cached wildcard key" patch. - Related: rhbz#2216877 - bz2216877 - When looking up included maps, sometimes autofs does not consult all the included files in order - fix incorrect matching of cached wildcard key - Resolves: rhbz#2216877 - bz2214444 - The sss lookup modules handles error return incorrectly in some cases - fix some sss error return cases. - Resolves: rhbz#2214444 - RHEL-84118 - autofs hang - autofs-5.1.4-114.el8_10.2 - fix lock ordering deadlock in expire_cleanup(). - change spec file %patchN to %patch -P N as required by rpm(8). - Resolves: RHEL-84118 - RHEL-72524 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount - fix deadlock in master_notify_submount(). -Resolves: RHEL-72524 - RHEL-61670 - sporadic autofs daemon segfaults - fix submount shutdown race. - RHEL-52402 - Sporadic mount failures with amd program maps on RHEL8 - fix amd external mount error handling. - fix amd external mount mount handling. - don't free ext mount if mounted. - refactor amd function do_program_mount(). - refactor umount_amd_ext_mount(). - add flags argument to amd do_program_mount(). - Resolves: RHEL-61670 RHEL-52402 - RHEL-18035 - SIGSEGV using hierarchical map entries on reload with autofs-5.1.4-109 - fix get parent multi-mount check in try_remount(). - fix deadlock in remount. - Resolves: RHEL-18035 - RHEL-7997 - multi mount detection fails for share with blank+dash causing SEGV crash -fix multi-mount check. -Resolves: RHEL-7997 - RHEL-12369 - autofs attempts to mount nonexistant ".hidden" filesystems - update patch "allow -null map in indirect maps". - Resolves: RHEL-12369 - bz2232402 - autofs attempts to mount nonexistant ".hidden" filesystems - allow -null map in indirect maps. - Resolves: rhbz#2232402 - bz2213267 - filesystems mount and expire immediately - fix expire retry looping. - Resolves: rhbz#2213267 - bz2216877 - When looking up included maps, sometimes autofs does not consult all the included files in order - fix the "fix incorrect matching of cached wildcard key" patch. - Related: rhbz#2216877 - bz2216877 - When looking up included maps, sometimes autofs does not consult all the included files in order - fix incorrect matching of cached wildcard key - Resolves: rhbz#2216877 - RHEL-90238 - autofs fails to mount shares when using kerberised LDAP (RHEL 8) - fix ldap sasl reconnect problem. - always recreate credential cache. - fix always recreate credential cache. - Resolves: RHEL-90238 - RHEL-84118 - autofs hang - autofs-5.1.4-114.el8_10.2 - fix lock ordering deadlock in expire_cleanup(). - change spec file %patchN to %patch -P N as required by rpm(8). - Resolves: RHEL-84118 - RHEL-72524 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount - fix deadlock in master_notify_submount(). -Resolves: RHEL-72524 - RHEL-61670 - sporadic autofs daemon segfaults - fix submount shutdown race. - RHEL-52402 - Sporadic mount failures with amd program maps on RHEL8 - fix amd external mount error handling. - fix amd external mount mount handling. - don't free ext mount if mounted. - refactor amd function do_program_mount(). - refactor umount_amd_ext_mount(). - add flags argument to amd do_program_mount(). - Resolves: RHEL-61670 RHEL-52402 - RHEL-18035 - SIGSEGV using hierarchical map entries on reload with autofs-5.1.4-109 - fix get parent multi-mount check in try_remount(). - fix deadlock in remount. - Resolves: RHEL-18035 - RHEL-7997 - multi mount detection fails for share with blank+dash causing SEGV crash -fix multi-mount check. -Resolves: RHEL-7997 - RHEL-12369 - autofs attempts to mount nonexistant ".hidden" filesystems - update patch "allow -null map in indirect maps". - Resolves: RHEL-12369 - bz2232402 - autofs attempts to mount nonexistant ".hidden" filesystems - allow -null map in indirect maps. - Resolves: rhbz#2232402 - bz2213267 - filesystems mount and expire immediately - fix expire retry looping. - Resolves: rhbz#2213267 - bz2216877 - When looking up included maps, sometimes autofs does not consult all the included files in order - fix the "fix incorrect matching of cached wildcard key" patch. - Related: rhbz#2216877 - RHEL-111930 - automount blocked when attempting to lookup ldap maps - fix missing unlock in sasl_do_kinit_ext_cc(). - Resolves: RHEL-111930 - RHEL-90238 - autofs fails to mount shares when using kerberised LDAP (RHEL 8) - fix ldap sasl reconnect problem. - always recreate credential cache. - fix always recreate credential cache. - Resolves: RHEL-90238 - RHEL-84118 - autofs hang - autofs-5.1.4-114.el8_10.2 - fix lock ordering deadlock in expire_cleanup(). - change spec file %patchN to %patch -P N as required by rpm(8). - Resolves: RHEL-84118 - RHEL-72524 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount - fix deadlock in master_notify_submount(). -Resolves: RHEL-72524 - RHEL-61670 - sporadic autofs daemon segfaults - fix submount shutdown race. - RHEL-52402 - Sporadic mount failures with amd program maps on RHEL8 - fix amd external mount error handling. - fix amd external mount mount handling. - don't free ext mount if mounted. - refactor amd function do_program_mount(). - refactor umount_amd_ext_mount(). - add flags argument to amd do_program_mount(). - Resolves: RHEL-61670 RHEL-52402 - RHEL-18035 - SIGSEGV using hierarchical map entries on reload with autofs-5.1.4-109 - fix get parent multi-mount check in try_remount(). - fix deadlock in remount. - Resolves: RHEL-18035 - RHEL-7997 - multi mount detection fails for share with blank+dash causing SEGV crash -fix multi-mount check. -Resolves: RHEL-7997 - RHEL-12369 - autofs attempts to mount nonexistant ".hidden" filesystems - update patch "allow -null map in indirect maps". - Resolves: RHEL-12369 - bz2232402 - autofs attempts to mount nonexistant ".hidden" filesystems - allow -null map in indirect maps. - Resolves: rhbz#2232402 - bz2213267 - filesystems mount and expire immediately - fix expire retry looping. - Resolves: rhbz#2213267 - RHEL-127179 - sssd autofs fails to get correct EHOSTDOWN if requested incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64 [rhel-8.10.z] - handle sss special case getautomntbyname() error. - Resolves: RHEL-127179 - RHEL-111930 - automount blocked when attempting to lookup ldap maps - fix missing unlock in sasl_do_kinit_ext_cc(). - Resolves: RHEL-111930 - RHEL-90238 - autofs fails to mount shares when using kerberised LDAP (RHEL 8) - fix ldap sasl reconnect problem. - always recreate credential cache. - fix always recreate credential cache. - Resolves: RHEL-90238 - RHEL-84118 - autofs hang - autofs-5.1.4-114.el8_10.2 - fix lock ordering deadlock in expire_cleanup(). - change spec file %patchN to %patch -P N as required by rpm(8). - Resolves: RHEL-84118 - RHEL-72524 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount - fix deadlock in master_notify_submount(). -Resolves: RHEL-72524 - RHEL-61670 - sporadic autofs daemon segfaults - fix submount shutdown race. - RHEL-52402 - Sporadic mount failures with amd program maps on RHEL8 - fix amd external mount error handling. - fix amd external mount mount handling. - don't free ext mount if mounted. - refactor amd function do_program_mount(). - refactor umount_amd_ext_mount(). - add flags argument to amd do_program_mount(). - Resolves: RHEL-61670 RHEL-52402 - RHEL-18035 - SIGSEGV using hierarchical map entries on reload with autofs-5.1.4-109 - fix get parent multi-mount check in try_remount(). - fix deadlock in remount. - Resolves: RHEL-18035 - RHEL-7997 - multi mount detection fails for share with blank+dash causing SEGV crash -fix multi-mount check. -Resolves: RHEL-7997 - RHEL-12369 - autofs attempts to mount nonexistant ".hidden" filesystems - update patch "allow -null map in indirect maps". - Resolves: RHEL-12369 - bz2232402 - autofs attempts to mount nonexistant ".hidden" filesystems - allow -null map in indirect maps. - Resolves: rhbz#2232402 - RHEL-97546 - hung tasks after autofs reload - quiet possibly noisy log message. - fix devid update on reload. - fix cache writelock must be taken in update_map_cache(). - fix skip valid map entries on expire cleanup. - remove unnecessary call to set_direct_mount_tree_catatonic(). - remove unnecessary assignment in umount_multi(). - fix direct mount trigger umount failure case. - refactor do_umount_autofs_direct(). - fix stale direct mount trigger not umounted on expire. - add function table_lookup_ino(). - improve handling of missing map entry for mount request. - Resolves: RHEL-97546 - RHEL-46409 - RFE: autofs: add handling for AMD 'nounmount' option - fix amd cache options not copied. - seperate amd mount and entry flags. - make iocl ops ->timeout() handle per-dentry expire. - refactor amd mount options handling. - add some unimplemented amd map options. - fix lookup search type in umount_subtree_mounts(). - fix remount_active_mount() not remounting symlinks. - log when setting amd per-mount timeout. - update per-mount expire timeout on readmap. - clear per-mount timeout if not set. - fix incorrect flags update in update_with_defaults(). - skip expire check for amd nounmount mounts. - Resolves: RHEL-46409 - RHEL-127179 - sssd autofs fails to get correct EHOSTDOWN if requested incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64 [rhel-8.10.z] - handle sss special case getautomntbyname() error. - Resolves: RHEL-127179 - RHEL-111930 - automount blocked when attempting to lookup ldap maps - fix missing unlock in sasl_do_kinit_ext_cc(). - Resolves: RHEL-111930 - RHEL-90238 - autofs fails to mount shares when using kerberised LDAP (RHEL 8) - fix ldap sasl reconnect problem. - always recreate credential cache. - fix always recreate credential cache. - Resolves: RHEL-90238 - RHEL-84118 - autofs hang - autofs-5.1.4-114.el8_10.2 - fix lock ordering deadlock in expire_cleanup(). - change spec file %patchN to %patch -P N as required by rpm(8). - Resolves: RHEL-84118 - RHEL-72524 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount - fix deadlock in master_notify_submount(). -Resolves: RHEL-72524 - RHEL-61670 - sporadic autofs daemon segfaults - fix submount shutdown race. - RHEL-52402 - Sporadic mount failures with amd program maps on RHEL8 - fix amd external mount error handling. - fix amd external mount mount handling. - don't free ext mount if mounted. - refactor amd function do_program_mount(). - refactor umount_amd_ext_mount(). - add flags argument to amd do_program_mount(). - Resolves: RHEL-61670 RHEL-52402 - RHEL-18035 - SIGSEGV using hierarchical map entries on reload with autofs-5.1.4-109 - fix get parent multi-mount check in try_remount(). - fix deadlock in remount. - Resolves: RHEL-18035 - RHEL-7997 - multi mount detection fails for share with blank+dash causing SEGV crash -fix multi-mount check. -Resolves: RHEL-7997 - RHEL-235959 - get_proximity returns a worng proximity on specific addresses [rhel-8.10.z] - Fix masks in parse_sub.c, so that hosts are correctly matched. - Resolves: RHEL-235959 - RHEL-97546 - hung tasks after autofs reload - quiet possibly noisy log message. - fix devid update on reload. - fix cache writelock must be taken in update_map_cache(). - fix skip valid map entries on expire cleanup. - remove unnecessary call to set_direct_mount_tree_catatonic(). - remove unnecessary assignment in umount_multi(). - fix direct mount trigger umount failure case. - refactor do_umount_autofs_direct(). - fix stale direct mount trigger not umounted on expire. - add function table_lookup_ino(). - improve handling of missing map entry for mount request. - Resolves: RHEL-97546 - RHEL-46409 - RFE: autofs: add handling for AMD 'nounmount' option - fix amd cache options not copied. - seperate amd mount and entry flags. - make iocl ops ->timeout() handle per-dentry expire. - refactor amd mount options handling. - add some unimplemented amd map options. - fix lookup search type in umount_subtree_mounts(). - fix remount_active_mount() not remounting symlinks. - log when setting amd per-mount timeout. - update per-mount expire timeout on readmap. - clear per-mount timeout if not set. - fix incorrect flags update in update_with_defaults(). - skip expire check for amd nounmount mounts. - Resolves: RHEL-46409 - RHEL-127179 - sssd autofs fails to get correct EHOSTDOWN if requested incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64 [rhel-8.10.z] - handle sss special case getautomntbyname() error. - Resolves: RHEL-127179 - RHEL-111930 - automount blocked when attempting to lookup ldap maps - fix missing unlock in sasl_do_kinit_ext_cc(). - Resolves: RHEL-111930 - RHEL-90238 - autofs fails to mount shares when using kerberised LDAP (RHEL 8) - fix ldap sasl reconnect problem. - always recreate credential cache. - fix always recreate credential cache. - Resolves: RHEL-90238 - RHEL-84118 - autofs hang - autofs-5.1.4-114.el8_10.2 - fix lock ordering deadlock in expire_cleanup(). - change spec file %patchN to %patch -P N as required by rpm(8). - Resolves: RHEL-84118 - RHEL-72524 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount - fix deadlock in master_notify_submount(). -Resolves: RHEL-72524 - RHEL-61670 - sporadic autofs daemon segfaults - fix submount shutdown race. - RHEL-52402 - Sporadic mount failures with amd program maps on RHEL8 - fix amd external mount error handling. - fix amd external mount mount handling. - don't free ext mount if mounted. - refactor amd function do_program_mount(). - refactor umount_amd_ext_mount(). - add flags argument to amd do_program_mount(). - Resolves: RHEL-61670 RHEL-52402 - RHEL-18035 - SIGSEGV using hierarchical map entries on reload with autofs-5.1.4-109 - fix get parent multi-mount check in try_remount(). - fix deadlock in remount. - Resolves: RHEL-18035 - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Fix CVE-2023-1981 (#2186688) - fix file attributes for /run/avahi-daemon (RHEL-5631) - fix two memory leaks (RHEL-43458) - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Fix CVE-2023-1981 (#2186688) - fix file attributes for /run/avahi-daemon (RHEL-5631) - fix two memory leaks (RHEL-43458) - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Fix CVE-2023-1981 (#2186688) - fix file attributes for /run/avahi-daemon (RHEL-5631) - fix two memory leaks (RHEL-43458) - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Fix CVE-2023-1981 (#2186688) - fix file attributes for /run/avahi-daemon (RHEL-5631) - fix two memory leaks (RHEL-43458) - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Fix CVE-2023-1981 (#2186688) - fix file attributes for /run/avahi-daemon (RHEL-5631) - fix two memory leaks (RHEL-43458) - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - automatically determine OS name at build time (#1195396) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Restore audit logs in bash-4.3 or newer versions Resolves: RHEL-24990 - Fix a crash in buffered_getchar() function Resolves: #2062291 - Bump version number Resolves: #2004189 - Fix crash if a timestamp in a history file overflowed a time_t Resolves: #1794884 - Fix infinite loop in long running scripts Resolves: #1943495 - Fix hang when limit for nproc is very high Resolves: #1890888 - Correctly drop saved UID when effective UID is not equal to its real UID Resolves: #1793943 - Avoid duplicating user path entries Resolves: #1667008 - Drop saved UID when effective UID is not equal to its real UID Resolves: #1793943 - Fix runtime option to enable history logging to syslog Related: #1687835 - Disable unescaped slashes in bracket expressions Resolves: RHEL-92267 - Restore audit logs in bash-4.3 or newer versions Resolves: RHEL-24990 - Fix a crash in buffered_getchar() function Resolves: #2062291 - Bump version number Resolves: #2004189 - Fix crash if a timestamp in a history file overflowed a time_t Resolves: #1794884 - Fix infinite loop in long running scripts Resolves: #1943495 - Fix hang when limit for nproc is very high Resolves: #1890888 - Correctly drop saved UID when effective UID is not equal to its real UID Resolves: #1793943 - Avoid duplicating user path entries Resolves: #1667008 - Drop saved UID when effective UID is not equal to its real UID Resolves: #1793943 - Update to 2.4 - Update to 2.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 2.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 2.7 - Rename rfkill function to avoid conflict with util-linux >= 2.31 Resolves: #1494855 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Do not use $MANPATH directly Resolves: #1495055 - Document how to override default completions Resolves: #1575573 - Restore audit logs in bash-4.3 or newer versions Resolves: RHEL-24990 - Fix a crash in buffered_getchar() function Resolves: #2062291 - Bump version number Resolves: #2004189 - Fix crash if a timestamp in a history file overflowed a time_t Resolves: #1794884 - Fix infinite loop in long running scripts Resolves: #1943495 - Fix hang when limit for nproc is very high Resolves: #1890888 - Correctly drop saved UID when effective UID is not equal to its real UID Resolves: #1793943 - Avoid duplicating user path entries Resolves: #1667008 - Drop saved UID when effective UID is not equal to its real UID Resolves: #1793943 - Fix runtime option to enable history logging to syslog Related: #1687835 - Disable unescaped slashes in bracket expressions Resolves: RHEL-92267 - Restore audit logs in bash-4.3 or newer versions Resolves: RHEL-24990 - Fix a crash in buffered_getchar() function Resolves: #2062291 - Bump version number Resolves: #2004189 - Fix crash if a timestamp in a history file overflowed a time_t Resolves: #1794884 - Fix infinite loop in long running scripts Resolves: #1943495 - Fix hang when limit for nproc is very high Resolves: #1890888 - Correctly drop saved UID when effective UID is not equal to its real UID Resolves: #1793943 - Avoid duplicating user path entries Resolves: #1667008 - Drop saved UID when effective UID is not equal to its real UID Resolves: #1793943 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Cleanup spec - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 1.07.1 - Fixes a bug that breaks kernel builds ( https://bugs.archlinux.org/task/53546 ) - build seems to be racy now, removing parallel build for now - add build dep on "ed" - new upstream version 1.07, dropped patches already appllied in usptream version - Install COPYING[.*] using the %license macro - Rebuild for readline 7.x - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers - Update addresses of b.root-servers.net (RHEL-18449) - Disable caching of stale records by default (RHEL-11785) - Prevent exahustion of memory from control channel (CVE-2023-3341) - Prevent the cache going over the configured limit (CVE-2023-2828) - Prevent flooding with UPDATE requests (CVE-2022-3094) - include upstream test for that change - Correct regression preventing bind-dyndb-ldap build (#2133889) - Prevent excessive resource use while processing large delegations. (CVE-2022-2795) - Prevent freeing zone during statistics rendering (#2101712) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204) - Reject out-of-zone NSEC entries in DNSSEC validation (CVE-2026-13321) - Reject RRSIG records with invalid label counts (CVE-2026-11721) - Add unittest check - Add reference counting to cache dns_slabheaders (CVE-2026-11622) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Address various spoofing attacks (CVE-2025-40778) - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2 - Change patches applying to use -P parameter - Add new root key 38696 into package files (RHEL-131891) - Update built-in anchors in delv and named - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204) - Reject out-of-zone NSEC entries in DNSSEC validation (CVE-2026-13321) - Reject RRSIG records with invalid label counts (CVE-2026-11721) - Add unittest check - Add reference counting to cache dns_slabheaders (CVE-2026-11622) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Address various spoofing attacks (CVE-2025-40778) - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2 - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Add new root key 38696 into package files (RHEL-131891) - Update built-in anchors in delv and named - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204) - Reject out-of-zone NSEC entries in DNSSEC validation (CVE-2026-13321) - Reject RRSIG records with invalid label counts (CVE-2026-11721) - Add unittest check - Add reference counting to cache dns_slabheaders (CVE-2026-11622) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Address various spoofing attacks (CVE-2025-40778) - Rebuild after CI change - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name - Ensure incompatible dhcp is not accepted - Ensure incompatible bind-dyndb-ldap is not accepted - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers - Update addresses of b.root-servers.net (RHEL-18449) - Disable caching of stale records by default (RHEL-11785) - Prevent exahustion of memory from control channel (CVE-2023-3341) - Prevent the cache going over the configured limit (CVE-2023-2828) - Prevent flooding with UPDATE requests (CVE-2022-3094) - include upstream test for that change - Change patches applying to use -P parameter - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended - Rebuild after CI change - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name - Ensure incompatible dhcp is not accepted - Ensure incompatible bind-dyndb-ldap is not accepted - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers - Update addresses of b.root-servers.net (RHEL-18449) - Disable caching of stale records by default (RHEL-11785) - Prevent exahustion of memory from control channel (CVE-2023-3341) - Address various spoofing attacks (CVE-2025-40778) - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2 - Change patches applying to use -P parameter - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended - Rebuild after CI change - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name - Ensure incompatible dhcp is not accepted - Ensure incompatible bind-dyndb-ldap is not accepted - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers - Update addresses of b.root-servers.net (RHEL-18449) - Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Address various spoofing attacks (CVE-2025-40778) - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2 - Change patches applying to use -P parameter - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended - Rebuild after CI change - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name - Ensure incompatible dhcp is not accepted - Ensure incompatible bind-dyndb-ldap is not accepted - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Address various spoofing attacks (CVE-2025-40778) - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2 - Change patches applying to use -P parameter - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended - Rebuild after CI change - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name - Ensure incompatible dhcp is not accepted - Ensure incompatible bind-dyndb-ldap is not accepted - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers - Update addresses of b.root-servers.net (RHEL-18449) - Disable caching of stale records by default (RHEL-11785) - Prevent exahustion of memory from control channel (CVE-2023-3341) - Prevent the cache going over the configured limit (CVE-2023-2828) - Prevent flooding with UPDATE requests (CVE-2022-3094) - include upstream test for that change - Correct regression preventing bind-dyndb-ldap build (#2133889) - Prevent excessive resource use while processing large delegations. (CVE-2022-2795) - Prevent freeing zone during statistics rendering (#2101712) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204) - Reject out-of-zone NSEC entries in DNSSEC validation (CVE-2026-13321) - Reject RRSIG records with invalid label counts (CVE-2026-11721) - Add unittest check - Add reference counting to cache dns_slabheaders (CVE-2026-11622) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Address various spoofing attacks (CVE-2025-40778) - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2 - Change patches applying to use -P parameter - Add new root key 38696 into package files (RHEL-131891) - Update built-in anchors in delv and named - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204) - Reject out-of-zone NSEC entries in DNSSEC validation (CVE-2026-13321) - Reject RRSIG records with invalid label counts (CVE-2026-11721) - Add unittest check - Add reference counting to cache dns_slabheaders (CVE-2026-11622) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Address various spoofing attacks (CVE-2025-40778) - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2 - Prevent assertion failure in dns64 mode with break-dnssec yes (CVE-2026-19666) - Prevent crash on wildcard responses containing both NSEC and NSEC3 proofs (CVE-2026-80274) - Add new root key 38696 into package files (RHEL-131891) - Update built-in anchors in delv and named - Validate NSEC3 signer matches owning zone (CVE-2026-10723) - Prevent accepting unsigned NSEC/NSEC3 records (CVE-2026-13204) - Reject out-of-zone NSEC entries in DNSSEC validation (CVE-2026-13321) - Reject RRSIG records with invalid label counts (CVE-2026-11721) - Add unittest check - Add reference counting to cache dns_slabheaders (CVE-2026-11622) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Address various spoofing attacks (CVE-2025-40778) - Rebuild after CI change - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name - Ensure incompatible dhcp is not accepted - Ensure incompatible bind-dyndb-ldap is not accepted - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers - Update addresses of b.root-servers.net (RHEL-18449) - Disable caching of stale records by default (RHEL-11785) - Prevent exahustion of memory from control channel (CVE-2023-3341) - Prevent the cache going over the configured limit (CVE-2023-2828) - Prevent flooding with UPDATE requests (CVE-2022-3094) - include upstream test for that change - Change patches applying to use -P parameter - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended - Rebuild after CI change - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name - Ensure incompatible dhcp is not accepted - Ensure incompatible bind-dyndb-ldap is not accepted - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers - Update addresses of b.root-servers.net (RHEL-18449) - Disable caching of stale records by default (RHEL-11785) - Prevent exahustion of memory from control channel (CVE-2023-3341) - Address various spoofing attacks (CVE-2025-40778) - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2 - Change patches applying to use -P parameter - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended - Rebuild after CI change - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name - Ensure incompatible dhcp is not accepted - Ensure incompatible bind-dyndb-ldap is not accepted - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers - Update addresses of b.root-servers.net (RHEL-18449) - Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Address various spoofing attacks (CVE-2025-40778) - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2 - Change patches applying to use -P parameter - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended - Rebuild after CI change - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name - Ensure incompatible dhcp is not accepted - Ensure incompatible bind-dyndb-ldap is not accepted - Speed up parsing of DNS messages with many different names (CVE-2023-4408) - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387 CVE-2023-50868) - Do not use header_prev in expire_lru_headers - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Address various spoofing attacks (CVE-2025-40778) - Add support for max-records-per-type and max-types-per-name options (RHEL-61936) - Support reading of new options also in named-checkconf -z, v2 - Change patches applying to use -P parameter - Limit additional section records CPU processing (CVE-2024-11187) - Correct ANY queries to not have additional data appended - Rebuild after CI change - Resolve CVE-2024-1975 - Resolve CVE-2024-1737 - Add ability to change runtime limits for max types and records per name - Ensure incompatible dhcp is not accepted - Ensure incompatible bind-dyndb-ldap is not accepted - Extend support for DWARF-5 offset tables as generated by Clang++. (#2222697) - Add support for DWARF-5 offset tables as generated by Clang++. (#2222697) - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information. (#2164700) - Restore tests/ sub-directory and use correct sources. (#2178963) - NVR Bump in order to allow rebuild now that the rhel-8.8.0-candidate tag is available. - Fix where the BFD library searches for plugins. (#2119380) - Fix a potential buffer overrun in the BFD library's PE handling code. (#2076973) - Allow z16 to be used as an alias for the s390 architecture's arch14 extensions. (#2073384) - Add support for the AArch64 architecture's RNG extension. (#2056691) - Do not set version info on unversion symbols. (#2055179) - Fix illegal memory accesses when parsing corrupt a.out format files. (RHEL-64927) - Fix illegal memory accesses when parsing corrupt a.out format files. (RHEL-64927) - Extend support for DWARF-5 offset tables as generated by Clang++. (#2222697) - Add support for DWARF-5 offset tables as generated by Clang++. (#2222697) - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information. (#2164700) - Restore tests/ sub-directory and use correct sources. (#2178963) - NVR Bump in order to allow rebuild now that the rhel-8.8.0-candidate tag is available. - Fix where the BFD library searches for plugins. (#2119380) - Fix a potential buffer overrun in the BFD library's PE handling code. (#2076973) - Allow z16 to be used as an alias for the s390 architecture's arch14 extensions. (#2073384) - Spec file: Rerun testsuites in order to fail build if the tests fail. - Import fix for PR 23652 in order to avoid AArch64 mapping symbols in linker error messages. (RHEL-84080) - Fix problems reading dwz created debug info files. (RHEL-84080) - Fix illegal memory accesses when parsing corrupt a.out format files. (RHEL-64927) - Fix illegal memory accesses when parsing corrupt a.out format files. (RHEL-64927) - Extend support for DWARF-5 offset tables as generated by Clang++. (#2222697) - Add support for DWARF-5 offset tables as generated by Clang++. (#2222697) - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information. (#2164700) - Restore tests/ sub-directory and use correct sources. (#2178963) - NVR Bump in order to allow rebuild now that the rhel-8.8.0-candidate tag is available. - Fix where the BFD library searches for plugins. (#2119380) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-126878) - Spec file: Rerun testsuites in order to fail build if the tests fail. - Import fix for PR 23652 in order to avoid AArch64 mapping symbols in linker error messages. (RHEL-84080) - Fix problems reading dwz created debug info files. (RHEL-84080) - Fix illegal memory accesses when parsing corrupt a.out format files. (RHEL-64927) - Fix illegal memory accesses when parsing corrupt a.out format files. (RHEL-64927) - Extend support for DWARF-5 offset tables as generated by Clang++. (#2222697) - Add support for DWARF-5 offset tables as generated by Clang++. (#2222697) - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information. (#2164700) - Restore tests/ sub-directory and use correct sources. (#2178963) - NVR Bump in order to allow rebuild now that the rhel-8.8.0-candidate tag is available. - Add librsvg2-tools dependency to iowatcher (#1700065) - Switch hardcoded python3 shebangs into the %{__python3} macro - Add missing BuildRequires on python3-devel so that %{__python3} macro is defined - Fix CVE-2018-10689 buffer overflow (#1575121) - Make scripts python3-ready - Fix for CVE-2018-10689 (#1575120) - BuildRequires: gcc - Use LDFLAGS from redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - New upstream version - fix hang when BLKTRACESETUP fails and "-o -" is used - Related: RHEL-17500 - Add librsvg2-tools dependency to iowatcher (#1700065) - Switch hardcoded python3 shebangs into the %{__python3} macro - Add missing BuildRequires on python3-devel so that %{__python3} macro is defined - Fix CVE-2018-10689 buffer overflow (#1575121) - Make scripts python3-ready - Fix for CVE-2018-10689 (#1575120) - BuildRequires: gcc - Use LDFLAGS from redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.52-4 - Fixing (#1885378) + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. + bluez-5.52-2 - Fixing (#1885378) + bluez-5.52-1 - Fixing (#1830397) + bluez-5.50-4 - Fixing CVE-2020-0556 - Debrand for AlmaLinux + bluez-5.63-3 - Add back the tests for OSCI. + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229 + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.52-4 - Fixing (#1885378) + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. - Debrand for AlmaLinux + bluez-5.63-5 - Resolves: RHEL-35371 - Fixing CVE-2023-27349 - Resolves: RHEL-35492 - Fixing CVE-2023-51589 + bluez-5.63-4 - Resolves: RHEL-35501 - Fixing CVE-2023-50230 - Resolves: RHEL-35504 - Fixing CVE-2023-50229 + bluez-5.63-3 - Add back the tests for OSCI. + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229 + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.52-4 - Fixing (#1885378) + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. + bluez-5.52-2 - Fixing (#1885378) + bluez-5.52-1 - Fixing (#1830397) + bluez-5.50-4 - Fixing CVE-2020-0556 - Debrand for AlmaLinux + bluez-5.63-3 - Add back the tests for OSCI. + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229 + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.52-4 - Fixing (#1885378) + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. - Debrand for AlmaLinux + bluez-5.63-5 - Resolves: RHEL-35371 - Fixing CVE-2023-27349 - Resolves: RHEL-35492 - Fixing CVE-2023-51589 + bluez-5.63-4 - Resolves: RHEL-35501 - Fixing CVE-2023-50230 - Resolves: RHEL-35504 - Fixing CVE-2023-50229 + bluez-5.63-3 - Add back the tests for OSCI. + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229 + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.52-4 - Fixing (#1885378) + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. + bluez-5.52-2 - Fixing (#1885378) + bluez-5.52-1 - Fixing (#1830397) + bluez-5.50-4 - Fixing CVE-2020-0556 - Debrand for AlmaLinux + bluez-5.63-3 - Add back the tests for OSCI. + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229 + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.52-4 - Fixing (#1885378) + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. - Debrand for AlmaLinux + bluez-5.63-5 - Resolves: RHEL-35371 - Fixing CVE-2023-27349 - Resolves: RHEL-35492 - Fixing CVE-2023-51589 + bluez-5.63-4 - Resolves: RHEL-35501 - Fixing CVE-2023-50230 - Resolves: RHEL-35504 - Fixing CVE-2023-50229 + bluez-5.63-3 - Add back the tests for OSCI. + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229 + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.52-4 - Fixing (#1885378) + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. + bluez-5.52-2 - Fixing (#1885378) + bluez-5.52-1 - Fixing (#1830397) + bluez-5.50-4 - Fixing CVE-2020-0556 - Debrand for AlmaLinux + bluez-5.63-3 - Add back the tests for OSCI. + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229 + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) + bluez-5.52-4 - Fixing (#1885378) + bluez-5.52-3 - Revering the 5.52-2 patch due some mismatch with upsream patch. - Debrand for AlmaLinux + bluez-5.63-5 - Resolves: RHEL-35371 - Fixing CVE-2023-27349 - Resolves: RHEL-35492 - Fixing CVE-2023-51589 + bluez-5.63-4 - Resolves: RHEL-35501 - Fixing CVE-2023-50230 - Resolves: RHEL-35504 - Fixing CVE-2023-50229 + bluez-5.63-3 - Add back the tests for OSCI. + bluez-5.63-2 - Change default of ClassicBondedOnly to true to align with HID specification. - Resolves: RHEL-18429 - Fixing CVE-2021-41229 + bluez-5.63-1 - Fixing (#) + bluez-5.56-3 - Fixing (#2027434) - Fixing CVE-2021-41229 + bluez-5.56-2 - Fixing (#1968392) - Removing bccmd check from tests + bluez-5.56-1 - Fixing (#1965057) - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 + bluez-5.52-5 - Fixing (#1961511) - bolt 0.9 upstream release - Update description with less emphasis on Thunderbolt version - bolt 0.9 upstream release - Rebuilt for fixed gating.yaml (remove missing tier1 gate) - bolt 0.8 upstream release with pre-boot ACL and IOMMU support D-Bus Configuration moved from sysconfdir to datadir Resolves: #1629715 - bolt 0.4 upstream release - Remove optional test dependencies - bolt 0.3 upstream release - Update BuildRequires to include gcc - Use forge macros - bolt 0.2 upstream release - Update BuildRequires dependencies. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Set database path to /var/lib/boltd, create it during installation, which is needed for the service file to work. - Initial upstream release - Reduce log level of "Could not load BootEntry" messages. - Raise more appropriate LookupError on unknown BLS keys. - Test upstream packaging. - Fix packaging issues. - Update to new upstream release 1.0. - Update to new upstream release 1.1. - Add caching of kernel and init ramdisk images. - Fix unicode entries handling. - Add tracebacks when --debug is used. - Update to bug fix release 1.2. - Fix RHEL-8 profiles. - Fix --add/del-opt precedence. - Fix backup image reference counting. - Check for duplicates consistently in the clone and edit commands. - Apply correct command line precedence to --add-opts and --del-opts. - Correctly merge multiple --add/del-opts when editing or cloning. - Correctly propagate --add/del-opts in boom edit commands. - Enhanced logging of --add/del-opts merge logic. - The default Python interpreter is now /usr/bin/python. - Fixed re-ordering of options modifications when read from disk. - Do not set BootParams attributes for anonymous option words. - Make lvm_root_lv validation checks more strict. - Improve BootParams.from_entry() parameter recovery debug logging. - Include sample OsProfile for Fedora 32. - Re-set sandbox state in test suite to ensure run-to-run consistency. - Improve compatibility with Red Hat BLS implementation. - Allow non-boom managed entries to be listed and displayed. - Handle quirks in Red Hat's use of the BLS machine_id key. - Allow grub2 bootloader variables to be expanded when cloning entries. - Simplify clone_entry logic and make consistent with edit_entry. - Ensure stable ordering of legacy boot entry configuration. - Fix --grub-id option handling. - Reduce log level of "Could not load BootEntry" messages. - Raise more appropriate LookupError on unknown BLS keys. - Test upstream packaging. - Fix packaging issues. - Update to new upstream release 1.0. - Update to new upstream release 1.1. - Add caching of kernel and init ramdisk images. - Fix unicode entries handling. - Add tracebacks when --debug is used. - Update to bug fix release 1.2. - Fix RHEL-8 profiles. - Fix --add/del-opt precedence. - Fix backup image reference counting. - Check for duplicates consistently in the clone and edit commands. - Apply correct command line precedence to --add-opts and --del-opts. - Correctly merge multiple --add/del-opts when editing or cloning. - Correctly propagate --add/del-opts in boom edit commands. - Enhanced logging of --add/del-opts merge logic. - The default Python interpreter is now /usr/bin/python. - Fixed re-ordering of options modifications when read from disk. - Do not set BootParams attributes for anonymous option words. - Make lvm_root_lv validation checks more strict. - Improve BootParams.from_entry() parameter recovery debug logging. - Include sample OsProfile for Fedora 32. - Re-set sandbox state in test suite to ensure run-to-run consistency. - Improve compatibility with Red Hat BLS implementation. - Allow non-boom managed entries to be listed and displayed. - Handle quirks in Red Hat's use of the BLS machine_id key. - Allow grub2 bootloader variables to be expanded when cloning entries. - Simplify clone_entry logic and make consistent with edit_entry. - Ensure stable ordering of legacy boot entry configuration. - Fix --grub-id option handling. - Reduce log level of "Could not load BootEntry" messages. - Raise more appropriate LookupError on unknown BLS keys. - Test upstream packaging. - Fix packaging issues. - Update to new upstream release 1.0. - Update to new upstream release 1.1. - Add caching of kernel and init ramdisk images. - Fix unicode entries handling. - Add tracebacks when --debug is used. - Update to bug fix release 1.2. - Fix RHEL-8 profiles. - Fix --add/del-opt precedence. - Fix backup image reference counting. - Check for duplicates consistently in the clone and edit commands. - Apply correct command line precedence to --add-opts and --del-opts. - Correctly merge multiple --add/del-opts when editing or cloning. - Correctly propagate --add/del-opts in boom edit commands. - Enhanced logging of --add/del-opts merge logic. - The default Python interpreter is now /usr/bin/python. - Fixed re-ordering of options modifications when read from disk. - Do not set BootParams attributes for anonymous option words. - Make lvm_root_lv validation checks more strict. - Improve BootParams.from_entry() parameter recovery debug logging. - Include sample OsProfile for Fedora 32. - Re-set sandbox state in test suite to ensure run-to-run consistency. - Improve compatibility with Red Hat BLS implementation. - Allow non-boom managed entries to be listed and displayed. - Handle quirks in Red Hat's use of the BLS machine_id key. - Allow grub2 bootloader variables to be expanded when cloning entries. - Simplify clone_entry logic and make consistent with edit_entry. - Ensure stable ordering of legacy boot entry configuration. - Fix --grub-id option handling. - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Resolves: CVE-2020-8927 - Resolves: rhbz#1737412 bump NRV for build to compose - Update to 1.0.6 - Resolves: rhbz#1637408 - Require the Python interpreter directly instead of using the package name - Related: rhbz#1619153 - Update to 1.0.5 - Python 2 subpackage disabled - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - update to 1.0.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Resolves: RHEL-133986 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: CVE-2020-8927 - Resolves: rhbz#1737412 bump NRV for build to compose - Update to 1.0.6 - Resolves: rhbz#1637408 - Require the Python interpreter directly instead of using the package name - Related: rhbz#1619153 - Update to 1.0.5 - Python 2 subpackage disabled - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - update to 1.0.1 - Fix for CVE-2022-36227 - Resolves: #2037839 - Do not follow symlinks when processing the fixup list (CVE-2021-31566) - Fix handling of symbolic link ACLs (CVE-2021-23177) - Rebase to version 3.3.3 - Fix out-of-bounds read (CVE-2019-19221) (#1803967) - Fix CVE-2019-18408: RAR use-after-free - fix use-after-free in delayed newc link processing (#1602575) - fix a few obvious resource leaks and strcpy() misuses (#1602575) - fixed use after free in RAR decoder (#1700752) - fixed double free in RAR decoder (#1700753) - release bump due to gating (#1680768) - Resolves: CVE-2025-5914 - Skip compression-level=1 size check on s390x. - Related to https://github.com/libarchive/libarchive/issues/1515 - Fix for CVE-2022-36227 - Resolves: #2037839 - Do not follow symlinks when processing the fixup list (CVE-2021-31566) - Fix handling of symbolic link ACLs (CVE-2021-23177) - Rebase to version 3.3.3 - Fix out-of-bounds read (CVE-2019-19221) (#1803967) - Fix CVE-2019-18408: RAR use-after-free - fix use-after-free in delayed newc link processing (#1602575) - fix a few obvious resource leaks and strcpy() misuses (#1602575) - fixed use after free in RAR decoder (#1700752) - fixed double free in RAR decoder (#1700753) - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121 - Resolves: CVE-2025-5914 - Skip compression-level=1 size check on s390x. - Related to https://github.com/libarchive/libarchive/issues/1515 - Fix for CVE-2022-36227 - Resolves: #2037839 - Do not follow symlinks when processing the fixup list (CVE-2021-31566) - Fix handling of symbolic link ACLs (CVE-2021-23177) - Rebase to version 3.3.3 - Fix out-of-bounds read (CVE-2019-19221) (#1803967) - Fix CVE-2019-18408: RAR use-after-free - fix use-after-free in delayed newc link processing (#1602575) - fix a few obvious resource leaks and strcpy() misuses (#1602575) - Rebase to 0.4.0 (#1788067) - https://github.com/projectatomic/bubblewrap/releases/tag/v0.3.0 - Update to 0.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream version - https://github.com/projectatomic/bubblewrap/releases/tag/v0.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New upstream version https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - New upstream version; https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.7 - Resolves: #1411814 - Backport upstream fix to help address CVE-2024-42472 in flatpak - Rebase to 0.4.0 (#1788067) - https://github.com/projectatomic/bubblewrap/releases/tag/v0.3.0 - Update to 0.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream version - https://github.com/projectatomic/bubblewrap/releases/tag/v0.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New upstream version https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Security fix for CVE-2026-87766 - Backport upstream fix to help address CVE-2024-42472 in flatpak - Rebase to 0.4.0 (#1788067) - https://github.com/projectatomic/bubblewrap/releases/tag/v0.3.0 - Update to 0.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream version - https://github.com/projectatomic/bubblewrap/releases/tag/v0.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New upstream version https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Adding bzip2.pc to the devel subpackage (#1289576) - Pass ldflags through so hardening actually works - Accept as many selectors as the file format allows (fixes CVE-2019-12900 regression) - Fixes out of bounds access in BZ2_decompress (RHEL-64929) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Fixes out of bounds access in BZ2_decompress (RHEL-64929) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Adding bzip2.pc to the devel subpackage (#1289576) - The previous fix caused some regressions - Use an updated patch that deals with the original issue+the regressions Resolves: RHEL-71140 - Fixes out of bounds access in BZ2_decompress (RHEL-64929) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Adding bzip2.pc to the devel subpackage (#1289576) - Pass ldflags through so hardening actually works - Accept as many selectors as the file format allows (fixes CVE-2019-12900 regression) - Fixes out of bounds access in BZ2_decompress (RHEL-64929) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Fixes out of bounds access in BZ2_decompress (RHEL-64929) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Adding bzip2.pc to the devel subpackage (#1289576) - The previous fix caused some regressions - Use an updated patch that deals with the original issue+the regressions Resolves: RHEL-71140 - Fixes out of bounds access in BZ2_decompress (RHEL-64929) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Adding bzip2.pc to the devel subpackage (#1289576) - Pass ldflags through so hardening actually works - Accept as many selectors as the file format allows (fixes CVE-2019-12900 regression) - Fixes out of bounds access in BZ2_decompress (RHEL-64929) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Fixes out of bounds access in BZ2_decompress (RHEL-64929) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Adding bzip2.pc to the devel subpackage (#1289576) - The previous fix caused some regressions - Use an updated patch that deals with the original issue+the regressions Resolves: RHEL-71140 - Fixes out of bounds access in BZ2_decompress (RHEL-64929) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2016-3189 bzip2: heap use after free in bzip2recover resolves: #1348179 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Adding static lib (#1253934) - Resolves: RHEL-7853 - Buffer Underwrite in ares_inet_net_pton() [rhel-8] - Resolves: rhbz#2235805 - read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] - Resolves: rhbz#2209517 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.9.0] - Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8] - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8] - Drop an unused patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - update to 1.13.0 - Resolves: RHEL-26525 - c-ares: Out of bounds read in ares__read_line() [rhel-8] - Resolves: RHEL-7853 - Buffer Underwrite in ares_inet_net_pton() [rhel-8] - Resolves: rhbz#2235805 - read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] - Resolves: rhbz#2209517 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.9.0] - Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8] - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8] - Drop an unused patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Resolves: RHEL-7853 - Buffer Underwrite in ares_inet_net_pton() [rhel-8] - Resolves: rhbz#2235805 - read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] - Resolves: rhbz#2209517 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.9.0] - Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8] - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8] - Drop an unused patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - update to 1.13.0 - Resolves: RHEL-26525 - c-ares: Out of bounds read in ares__read_line() [rhel-8] - Resolves: RHEL-7853 - Buffer Underwrite in ares_inet_net_pton() [rhel-8] - Resolves: rhbz#2235805 - read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] - Resolves: rhbz#2209517 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.9.0] - Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8] - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8] - Drop an unused patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to CKBI 2.60_v7.0.306 from NSS 3.91 - Removing: - # Certificate "Camerfirma Global Chambersign Root" - # Certificate "Staat der Nederlanden EV Root CA" - # Certificate "OpenTrust Root CA G1" - # Certificate "Swedish Government Root Authority v1" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "CCA India 2007" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "InfoNotary CSP Root" - # Certificate "DigiNotar Root CA" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 3" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "ePKI EV SSL Certification Authority - G1" - Adding: - # Certificate "DigiCert TLS ECC P384 Root G5" - # Certificate "DigiCert TLS RSA4096 Root G5" - # Certificate "DigiCert SMIME ECC P384 Root G5" - # Certificate "DigiCert SMIME RSA4096 Root G5" - # Certificate "Certainly Root R1" - # Certificate "Certainly Root E1" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA" - # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - # Certificate "Symantec Enterprise Mobile Root for Microsoft" - # Certificate "A-Trust-Root-05" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "ATHEX Root CA" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "America Online Root Certification Authority 1" - # Certificate "Juur-SK" - # Certificate "ComSign CA" - # Certificate "ComSign Secured CA" - # Certificate "ComSign Advanced Security CA" - # Certificate "Global Chambersign Root" - # Certificate "Sonera Class2 CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3" - # Certificate "VeriSign, Inc." - # Certificate "GTE CyberTrust Global Root" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "Swiss Government Root CA III" - # Certificate "Application CA G4 Root" - # Certificate "SSC GDL CA Root A" - # Certificate "GlobalSign Code Signing Root E45" - # Certificate "GlobalSign Code Signing Root R45" - # Certificate "Entrust Code Signing Root Certification Authority - CSBR1" - Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "TWCA Root Certification Authority" - # Certificate "Izenpe.com" - # Certificate "state-institutions" - # Certificate "GlobalSign" - # Certificate "Common Policy" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-Qual-02" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "AC Raíz Certicámara S.A." - Update to CKBI 2.54 from NSS 3.79 - Update to CKBI 2.54 from NSS 3.79 - Adding: - # Certificate "CAEDICOM Root" - # Certificate "I.CA Root CA/RSA" - # Certificate "MULTICERT Root Certification Authority 01" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "Swedish Government Root Authority v3" - # Certificate "Swedish Government Root Authority v2" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "Government Root Certification Authority" - # Certificate "A-Trust-Qual-02" - # Certificate "Thailand National Root Certification Authority - G1" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "SSC GDL CA Root B" - # Certificate "SAPO Class 2 Root CA" - # Certificate "SAPO Class 3 Root CA" - # Certificate "SAPO Class 4 Root CA" - # Certificate "CA Disig Root R1" - # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay" - # Certificate "ApplicationCA2 Root" - # Certificate "GlobalSign" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G4" - # Certificate "Halcom Root CA" - # Certificate "Swisscom Root EV CA 2" - # Certificate "CFCA GT CA" - # Certificate "Digidentity L3 Root CA - G2" - # Certificate "SITHS Root CA v1" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "Swisscom Root CA 2" - # Certificate "IGC/A AC racine Etat francais" - # Certificate "PersonalID Trustworthy RootCA 2011" - # Certificate "Swedish Government Root Authority v1" - # Certificate "Swiss Government Root CA II" - # Certificate "Swiss Government Root CA I" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "Microsoft Root Certificate Authority 2011" - # Certificate "CCA India 2011" - # Certificate "ANCERT Certificados Notariales V2" - # Certificate "ANCERT Certificados CGN V2" - # Certificate "EE Certification Centre Root CA" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "Verizon Global Root CA" - # Certificate "SwissSign Silver Root CA - G3" - # Certificate "SwissSign Platinum Root CA - G3" - # Certificate "SwissSign Gold Root CA - G3" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "SITHS CA v3" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ANF Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "CCA India 2007" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "ECRaizEstado" - # Certificate "Configuration" - # Certificate "FNMT-RCM" - # Certificate "StartCom Certification Authority" - # Certificate "TWCA Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "thawte Primary Root CA - G2" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "E-ME SSI (RCA)" - # Certificate "ACEDICOM Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Correo Uruguayo - Root CA" - # Certificate "CNNIC ROOT" - # Certificate "Common Policy" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "Cisco Root CA 2048" - # Certificate "CA Disig" - # Certificate "InfoNotary CSP Root" - # Certificate "UCA Global Root" - # Certificate "UCA Root" - # Certificate "DigiNotar Root CA" - # Certificate "Starfield Services Root Certificate Authority" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "Izenpe.com" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "state-institutions" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "SSC Root CA A" - # Certificate "SSC Root CA B" - # Certificate "SSC Root CA C" - # Certificate "Autoridad de Certificacion de la Abogacia" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "VAS Latvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "GLOBALTRUST" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "AC RAIZ DNIE" - # Certificate "Common Policy" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-nQual-03" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 1" - # Certificate "KISA RootCA 3" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "A-Trust-Qual-02" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "Microsoft Root Certificate Authority 2010" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "UTN-USERFirst-Object" - # Certificate "BYTE Root Certification Authority 001" - # Certificate "CISRCA1" - # Certificate "ePKI Root Certification Authority - G2" - # Certificate "ePKI EV SSL Certification Authority - G1" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "SSL.com EV Root Certification Authority RSA" - # Certificate "LuxTrust Global Root 2" - # Certificate "ACA ROOT" - # Certificate "Security Communication ECC RootCA1" - # Certificate "Security Communication RootCA3" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "Network Solutions RSA Certificate Authority" - # Certificate "Network Solutions ECC Certificate Authority" - # Certificate "Australian Defence Public Root CA" - # Certificate "SI-TRUST Root" - # Certificate "Halcom Root Certificate Authority" - # Certificate "Application CA G3 Root" - # Certificate "GLOBALTRUST 2015" - # Certificate "Microsoft ECC Product Root Certificate Authority 2018" - # Certificate "emSign Root CA - G2" - # Certificate "emSign Root CA - C2" - # Certificate "Microsoft ECC TS Root Certificate Authority 2018" - # Certificate "DigiCert CS ECC P384 Root G5" - # Certificate "DigiCert CS RSA4096 Root G5" - # Certificate "DigiCert RSA4096 Root G5" - # Certificate "DigiCert ECC P384 Root G5" - # Certificate "HARICA Code Signing RSA Root CA 2021" - # Certificate "HARICA Code Signing ECC Root CA 2021" - # Certificate "Microsoft Identity Verification Root Certificate Authority 2020" - Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "GlobalSign Root CA - R2" - # Certificate "DST Root CA X3" - # Certificate "Cybertrust Global Root" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Adding: - # Certificate "TunTrust Root CA" - # Certificate "HARICA TLS RSA Root CA 2021" - # Certificate "HARICA TLS ECC Root CA 2021" - # Certificate "HARICA Client RSA Root CA 2021" - # Certificate "HARICA Client ECC Root CA 2021" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "vTrus ECC Root CA" - # Certificate "vTrus Root CA" - # Certificate "ISRG Root X2" - # Certificate "HiPKI Root CA - G1" - # Certificate "Telia Root CA v2" - # Certificate "D-TRUST BR Root CA 1 2020" - # Certificate "D-TRUST EV Root CA 1 2020" - Update to CKBI 2.50 from NSS 3.67 - version number update only - Update to CKBI 2.48 from NSS 3.66 - Removing: - # Certificate "QuoVadis Root CA" - # Certificate "Sonera Class 2 Root CA" - # Certificate "Trustis FPS Root CA" - Adding: - # Certificate "GLOBALTRUST 2020" - # Certificate "ANF Secure Server Root CA" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" - Update to CKBI 2.48 from NSS 3.64 - Removing: - # Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "Taiwan GRCA" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "EE Certification Centre Root CA" - # Certificate "LuxTrust Global Root 2" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G4" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G4" - Adding: - # Certificate "Microsoft ECC Root Certificate Authority 2017" - # Certificate "Microsoft RSA Root Certificate Authority 2017" - # Certificate "e-Szigno Root CA 2017" - # Certificate "certSIGN Root CA G2" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "NAVER Global Root Certification Authority" - # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" - # Certificate "GlobalSign Secure Mail Root R45" - # Certificate "GlobalSign Secure Mail Root E45" - # Certificate "GlobalSign Root R46" - # Certificate "GlobalSign Root E46" - fix post issues - Update to CKBI 2.41 from NSS 3.53.0 - Removing: - # Certificate "AddTrust Low-Value Services Root" - # Certificate "AddTrust External Root" - # Certificate "UTN USERFirst Email Root CA" - # Certificate "Certplus Class 2 Primary CA" - # Certificate "Deutsche Telekom Root CA 2" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "Swisscom Root CA 2" - # Certificate "Certinomis - Root CA" - Adding: - # Certificate "Entrust Root Certification Authority - G4" - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1 - Removing: - # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" - # Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - # Certificate "Security Communication Root CA" - # Certificate "Camerfirma Chambers of Commerce Root" - # Certificate "Hongkong Post Root CA 1" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor ECA-1" - # Certificate "FNMT-RCM" - Adding: - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "D-Trust SBR Root CA 1 2022" - # Certificate "D-Trust SBR Root CA 2 2022" - # Certificate "Telekom Security SMIME ECC Root 2021" - # Certificate "Telekom Security TLS ECC Root 2020" - # Certificate "Telekom Security SMIME RSA Root 2023" - # Certificate "Telekom Security TLS RSA Root 2023" - # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB" - # Certificate "SECOM Trust.net" - # Certificate "Chambers of Commerce Root" - # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3" - # Certificate "SSL.com Code Signing RSA Root CA 2022" - # Certificate "SSL.com Code Signing ECC Root CA 2022" - Update to CKBI 2.60_v7.0.306 from NSS 3.91 - Removing: - # Certificate "Camerfirma Global Chambersign Root" - # Certificate "Staat der Nederlanden EV Root CA" - # Certificate "OpenTrust Root CA G1" - # Certificate "Swedish Government Root Authority v1" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "CCA India 2007" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "InfoNotary CSP Root" - # Certificate "DigiNotar Root CA" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 3" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "ePKI EV SSL Certification Authority - G1" - Adding: - # Certificate "DigiCert TLS ECC P384 Root G5" - # Certificate "DigiCert TLS RSA4096 Root G5" - # Certificate "DigiCert SMIME ECC P384 Root G5" - # Certificate "DigiCert SMIME RSA4096 Root G5" - # Certificate "Certainly Root R1" - # Certificate "Certainly Root E1" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA" - # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - # Certificate "Symantec Enterprise Mobile Root for Microsoft" - # Certificate "A-Trust-Root-05" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "ATHEX Root CA" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "America Online Root Certification Authority 1" - # Certificate "Juur-SK" - # Certificate "ComSign CA" - # Certificate "ComSign Secured CA" - # Certificate "ComSign Advanced Security CA" - # Certificate "Global Chambersign Root" - # Certificate "Sonera Class2 CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3" - # Certificate "VeriSign, Inc." - # Certificate "GTE CyberTrust Global Root" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "Swiss Government Root CA III" - # Certificate "Application CA G4 Root" - # Certificate "SSC GDL CA Root A" - # Certificate "GlobalSign Code Signing Root E45" - # Certificate "GlobalSign Code Signing Root R45" - # Certificate "Entrust Code Signing Root Certification Authority - CSBR1" - Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "TWCA Root Certification Authority" - # Certificate "Izenpe.com" - # Certificate "state-institutions" - # Certificate "GlobalSign" - # Certificate "Common Policy" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-Qual-02" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "AC Raíz Certicámara S.A." - Update to CKBI 2.54 from NSS 3.79 - Update to CKBI 2.54 from NSS 3.79 - Adding: - # Certificate "CAEDICOM Root" - # Certificate "I.CA Root CA/RSA" - # Certificate "MULTICERT Root Certification Authority 01" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "Swedish Government Root Authority v3" - # Certificate "Swedish Government Root Authority v2" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "Government Root Certification Authority" - # Certificate "A-Trust-Qual-02" - # Certificate "Thailand National Root Certification Authority - G1" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "SSC GDL CA Root B" - # Certificate "SAPO Class 2 Root CA" - # Certificate "SAPO Class 3 Root CA" - # Certificate "SAPO Class 4 Root CA" - # Certificate "CA Disig Root R1" - # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay" - # Certificate "ApplicationCA2 Root" - # Certificate "GlobalSign" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G4" - # Certificate "Halcom Root CA" - # Certificate "Swisscom Root EV CA 2" - # Certificate "CFCA GT CA" - # Certificate "Digidentity L3 Root CA - G2" - # Certificate "SITHS Root CA v1" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "Swisscom Root CA 2" - # Certificate "IGC/A AC racine Etat francais" - # Certificate "PersonalID Trustworthy RootCA 2011" - # Certificate "Swedish Government Root Authority v1" - # Certificate "Swiss Government Root CA II" - # Certificate "Swiss Government Root CA I" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "Microsoft Root Certificate Authority 2011" - # Certificate "CCA India 2011" - # Certificate "ANCERT Certificados Notariales V2" - # Certificate "ANCERT Certificados CGN V2" - # Certificate "EE Certification Centre Root CA" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "Verizon Global Root CA" - # Certificate "SwissSign Silver Root CA - G3" - # Certificate "SwissSign Platinum Root CA - G3" - # Certificate "SwissSign Gold Root CA - G3" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "SITHS CA v3" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ANF Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "CCA India 2007" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "ECRaizEstado" - # Certificate "Configuration" - # Certificate "FNMT-RCM" - # Certificate "StartCom Certification Authority" - # Certificate "TWCA Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "thawte Primary Root CA - G2" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "E-ME SSI (RCA)" - # Certificate "ACEDICOM Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Correo Uruguayo - Root CA" - # Certificate "CNNIC ROOT" - # Certificate "Common Policy" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "Cisco Root CA 2048" - # Certificate "CA Disig" - # Certificate "InfoNotary CSP Root" - # Certificate "UCA Global Root" - # Certificate "UCA Root" - # Certificate "DigiNotar Root CA" - # Certificate "Starfield Services Root Certificate Authority" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "Izenpe.com" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "state-institutions" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "SSC Root CA A" - # Certificate "SSC Root CA B" - # Certificate "SSC Root CA C" - # Certificate "Autoridad de Certificacion de la Abogacia" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "VAS Latvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "GLOBALTRUST" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "AC RAIZ DNIE" - # Certificate "Common Policy" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-nQual-03" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 1" - # Certificate "KISA RootCA 3" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "A-Trust-Qual-02" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "Microsoft Root Certificate Authority 2010" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "UTN-USERFirst-Object" - # Certificate "BYTE Root Certification Authority 001" - # Certificate "CISRCA1" - # Certificate "ePKI Root Certification Authority - G2" - # Certificate "ePKI EV SSL Certification Authority - G1" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "SSL.com EV Root Certification Authority RSA" - # Certificate "LuxTrust Global Root 2" - # Certificate "ACA ROOT" - # Certificate "Security Communication ECC RootCA1" - # Certificate "Security Communication RootCA3" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "Network Solutions RSA Certificate Authority" - # Certificate "Network Solutions ECC Certificate Authority" - # Certificate "Australian Defence Public Root CA" - # Certificate "SI-TRUST Root" - # Certificate "Halcom Root Certificate Authority" - # Certificate "Application CA G3 Root" - # Certificate "GLOBALTRUST 2015" - # Certificate "Microsoft ECC Product Root Certificate Authority 2018" - # Certificate "emSign Root CA - G2" - # Certificate "emSign Root CA - C2" - # Certificate "Microsoft ECC TS Root Certificate Authority 2018" - # Certificate "DigiCert CS ECC P384 Root G5" - # Certificate "DigiCert CS RSA4096 Root G5" - # Certificate "DigiCert RSA4096 Root G5" - # Certificate "DigiCert ECC P384 Root G5" - # Certificate "HARICA Code Signing RSA Root CA 2021" - # Certificate "HARICA Code Signing ECC Root CA 2021" - # Certificate "Microsoft Identity Verification Root Certificate Authority 2020" - Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "GlobalSign Root CA - R2" - # Certificate "DST Root CA X3" - # Certificate "Cybertrust Global Root" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Adding: - # Certificate "TunTrust Root CA" - # Certificate "HARICA TLS RSA Root CA 2021" - # Certificate "HARICA TLS ECC Root CA 2021" - # Certificate "HARICA Client RSA Root CA 2021" - # Certificate "HARICA Client ECC Root CA 2021" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "vTrus ECC Root CA" - # Certificate "vTrus Root CA" - # Certificate "ISRG Root X2" - # Certificate "HiPKI Root CA - G1" - # Certificate "Telia Root CA v2" - # Certificate "D-TRUST BR Root CA 1 2020" - # Certificate "D-TRUST EV Root CA 1 2020" - Update to CKBI 2.50 from NSS 3.67 - version number update only - Update to CKBI 2.48 from NSS 3.66 - Removing: - # Certificate "QuoVadis Root CA" - # Certificate "Sonera Class 2 Root CA" - # Certificate "Trustis FPS Root CA" - Adding: - # Certificate "GLOBALTRUST 2020" - # Certificate "ANF Secure Server Root CA" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" - Update to CKBI 2.48 from NSS 3.64 - Removing: - # Certificate "Verisign Class 3 Public Primary Certification Authority - G3" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "Taiwan GRCA" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "thawte Primary Root CA - G2" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "EE Certification Centre Root CA" - # Certificate "LuxTrust Global Root 2" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G4" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G4" - Adding: - # Certificate "Microsoft ECC Root Certificate Authority 2017" - # Certificate "Microsoft RSA Root Certificate Authority 2017" - # Certificate "e-Szigno Root CA 2017" - # Certificate "certSIGN Root CA G2" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "NAVER Global Root Certification Authority" - # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS" - # Certificate "GlobalSign Secure Mail Root R45" - # Certificate "GlobalSign Secure Mail Root E45" - # Certificate "GlobalSign Root R46" - # Certificate "GlobalSign Root E46" - fix post issues - Release bump to fix version overtaking - Update to CKBI 2.80_v9.0.304 from NSS 3.114 - Adding: - # Certificate "TWCA CYBER Root CA" - # Certificate "TWCA Global Root CA G2" - # Certificate "SecureSign Root CA12" - # Certificate "SecureSign Root CA14" - # Certificate "SecureSign Root CA15" - # Certificate "D-TRUST BR Root CA 2 2023" - # Certificate "TrustAsia SMIME ECC Root CA" - # Certificate "TrustAsia SMIME RSA Root CA" - # Certificate "TrustAsia TLS ECC Root CA" - # Certificate "TrustAsia TLS RSA Root CA" - # Certificate "D-TRUST EV Root CA 2 2023" - # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" - # Certificate "SwissSign RSA TLS Root CA 2022 - 1" - # Certificate "Sectigo Public Code Signing Root R46" - # Certificate "Sectigo Public Code Signing Root E46" - update License: field to SPDX - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1 - Removing: - # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" - # Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - # Certificate "Security Communication Root CA" - # Certificate "Camerfirma Chambers of Commerce Root" - # Certificate "Hongkong Post Root CA 1" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor ECA-1" - # Certificate "FNMT-RCM" - Adding: - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "D-Trust SBR Root CA 1 2022" - # Certificate "D-Trust SBR Root CA 2 2022" - # Certificate "Telekom Security SMIME ECC Root 2021" - # Certificate "Telekom Security TLS ECC Root 2020" - # Certificate "Telekom Security SMIME RSA Root 2023" - # Certificate "Telekom Security TLS RSA Root 2023" - # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB" - # Certificate "SECOM Trust.net" - # Certificate "Chambers of Commerce Root" - # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3" - # Certificate "SSL.com Code Signing RSA Root CA 2022" - # Certificate "SSL.com Code Signing ECC Root CA 2022" - Update to CKBI 2.60_v7.0.306 from NSS 3.91 - Removing: - # Certificate "Camerfirma Global Chambersign Root" - # Certificate "Staat der Nederlanden EV Root CA" - # Certificate "OpenTrust Root CA G1" - # Certificate "Swedish Government Root Authority v1" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "CCA India 2007" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "InfoNotary CSP Root" - # Certificate "DigiNotar Root CA" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 3" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "ePKI EV SSL Certification Authority - G1" - Adding: - # Certificate "DigiCert TLS ECC P384 Root G5" - # Certificate "DigiCert TLS RSA4096 Root G5" - # Certificate "DigiCert SMIME ECC P384 Root G5" - # Certificate "DigiCert SMIME RSA4096 Root G5" - # Certificate "Certainly Root R1" - # Certificate "Certainly Root E1" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA" - # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - # Certificate "Symantec Enterprise Mobile Root for Microsoft" - # Certificate "A-Trust-Root-05" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "ATHEX Root CA" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "America Online Root Certification Authority 1" - # Certificate "Juur-SK" - # Certificate "ComSign CA" - # Certificate "ComSign Secured CA" - # Certificate "ComSign Advanced Security CA" - # Certificate "Global Chambersign Root" - # Certificate "Sonera Class2 CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3" - # Certificate "VeriSign, Inc." - # Certificate "GTE CyberTrust Global Root" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "Swiss Government Root CA III" - # Certificate "Application CA G4 Root" - # Certificate "SSC GDL CA Root A" - # Certificate "GlobalSign Code Signing Root E45" - # Certificate "GlobalSign Code Signing Root R45" - # Certificate "Entrust Code Signing Root Certification Authority - CSBR1" - Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "TWCA Root Certification Authority" - # Certificate "Izenpe.com" - # Certificate "state-institutions" - # Certificate "GlobalSign" - # Certificate "Common Policy" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-Qual-02" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "AC Raíz Certicámara S.A." - Update to CKBI 2.54 from NSS 3.79 - Update to CKBI 2.54 from NSS 3.79 - Adding: - # Certificate "CAEDICOM Root" - # Certificate "I.CA Root CA/RSA" - # Certificate "MULTICERT Root Certification Authority 01" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "CCA India 2015 SPL" - # Certificate "Swedish Government Root Authority v3" - # Certificate "Swedish Government Root Authority v2" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - # Certificate "OpenTrust Root CA G1" - # Certificate "OpenTrust Root CA G2" - # Certificate "OpenTrust Root CA G3" - # Certificate "Certplus Root CA G1" - # Certificate "Certplus Root CA G2" - # Certificate "Government Root Certification Authority" - # Certificate "A-Trust-Qual-02" - # Certificate "Thailand National Root Certification Authority - G1" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "SSC GDL CA Root B" - # Certificate "SAPO Class 2 Root CA" - # Certificate "SAPO Class 3 Root CA" - # Certificate "SAPO Class 4 Root CA" - # Certificate "CA Disig Root R1" - # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay" - # Certificate "ApplicationCA2 Root" - # Certificate "GlobalSign" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 3 Public Primary Certification Authority - G4" - # Certificate "Halcom Root CA" - # Certificate "Swisscom Root EV CA 2" - # Certificate "CFCA GT CA" - # Certificate "Digidentity L3 Root CA - G2" - # Certificate "SITHS Root CA v1" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "Swisscom Root CA 2" - # Certificate "IGC/A AC racine Etat francais" - # Certificate "PersonalID Trustworthy RootCA 2011" - # Certificate "Swedish Government Root Authority v1" - # Certificate "Swiss Government Root CA II" - # Certificate "Swiss Government Root CA I" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "Microsoft Root Certificate Authority 2011" - # Certificate "CCA India 2011" - # Certificate "ANCERT Certificados Notariales V2" - # Certificate "ANCERT Certificados CGN V2" - # Certificate "EE Certification Centre Root CA" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "Verizon Global Root CA" - # Certificate "SwissSign Silver Root CA - G3" - # Certificate "SwissSign Platinum Root CA - G3" - # Certificate "SwissSign Gold Root CA - G3" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "SITHS CA v3" - # Certificate "Certinomis - Autorité Racine" - # Certificate "ANF Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Thawte Server CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "CCA India 2007" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "ECRaizEstado" - # Certificate "Configuration" - # Certificate "FNMT-RCM" - # Certificate "StartCom Certification Authority" - # Certificate "TWCA Root Certification Authority" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4" - # Certificate "thawte Primary Root CA - G2" - # Certificate "GeoTrust Primary Certification Authority - G2" - # Certificate "VeriSign Universal Root Certification Authority" - # Certificate "thawte Primary Root CA - G3" - # Certificate "GeoTrust Primary Certification Authority - G3" - # Certificate "E-ME SSI (RCA)" - # Certificate "ACEDICOM Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Correo Uruguayo - Root CA" - # Certificate "CNNIC ROOT" - # Certificate "Common Policy" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "Cisco Root CA 2048" - # Certificate "CA Disig" - # Certificate "InfoNotary CSP Root" - # Certificate "UCA Global Root" - # Certificate "UCA Root" - # Certificate "DigiNotar Root CA" - # Certificate "Starfield Services Root Certificate Authority" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "Izenpe.com" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "state-institutions" - # Certificate "SECOM Trust Systems CO.,LTD." - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "SSC Root CA A" - # Certificate "SSC Root CA B" - # Certificate "SSC Root CA C" - # Certificate "Autoridad de Certificacion de la Abogacia" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "VAS Latvijas Pasts SSI(RCA)" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "GLOBALTRUST" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "GlobalSign" - # Certificate "IGC/A" - # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "Swisscom Root CA 1" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "AC RAIZ DNIE" - # Certificate "Common Policy" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-nQual-03" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 1" - # Certificate "KISA RootCA 3" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "A-Trust-Qual-02" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "GeoTrust Universal CA" - # Certificate "GeoTrust Universal CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "Microsoft Root Certificate Authority 2010" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "UTN-USERFirst-Object" - # Certificate "BYTE Root Certification Authority 001" - # Certificate "CISRCA1" - # Certificate "ePKI Root Certification Authority - G2" - # Certificate "ePKI EV SSL Certification Authority - G1" - # Certificate "AC Raíz Certicámara S.A." - # Certificate "SSL.com EV Root Certification Authority RSA" - # Certificate "LuxTrust Global Root 2" - # Certificate "ACA ROOT" - # Certificate "Security Communication ECC RootCA1" - # Certificate "Security Communication RootCA3" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "Network Solutions RSA Certificate Authority" - # Certificate "Network Solutions ECC Certificate Authority" - # Certificate "Australian Defence Public Root CA" - # Certificate "SI-TRUST Root" - # Certificate "Halcom Root Certificate Authority" - # Certificate "Application CA G3 Root" - # Certificate "GLOBALTRUST 2015" - # Certificate "Microsoft ECC Product Root Certificate Authority 2018" - # Certificate "emSign Root CA - G2" - # Certificate "emSign Root CA - C2" - # Certificate "Microsoft ECC TS Root Certificate Authority 2018" - # Certificate "DigiCert CS ECC P384 Root G5" - # Certificate "DigiCert CS RSA4096 Root G5" - # Certificate "DigiCert RSA4096 Root G5" - # Certificate "DigiCert ECC P384 Root G5" - # Certificate "HARICA Code Signing RSA Root CA 2021" - # Certificate "HARICA Code Signing ECC Root CA 2021" - # Certificate "Microsoft Identity Verification Root Certificate Authority 2020" - Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "GlobalSign Root CA - R2" - # Certificate "DST Root CA X3" - # Certificate "Cybertrust Global Root" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - Adding: - # Certificate "TunTrust Root CA" - # Certificate "HARICA TLS RSA Root CA 2021" - # Certificate "HARICA TLS ECC Root CA 2021" - # Certificate "HARICA Client RSA Root CA 2021" - # Certificate "HARICA Client ECC Root CA 2021" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "vTrus ECC Root CA" - # Certificate "vTrus Root CA" - # Certificate "ISRG Root X2" - # Certificate "HiPKI Root CA - G1" - # Certificate "Telia Root CA v2" - # Certificate "D-TRUST BR Root CA 1 2020" - # Certificate "D-TRUST EV Root CA 1 2020" - Update to CKBI 2.50 from NSS 3.67 - version number update only - Fix malformed patch header in remove-emsign-root-cs-ca-g3.patch - Removing: emSign Root CS CA - G3 from Microsoft Code Signing certificates - Update to CKBI 2.92_v9.0.319 from NSS 3.131.1 Removing: - emSign Root CA - C1 Adding: - Actalis Code Signing ECC Root CA 2025 - Actalis Code Signing RSA Root CA 2025 - emSign Root CS CA - G2 - emSign Root CS CA - G3 - IdenTrust Commercial Root Code Signing RSA CA 2 - e-Szigno CodeSigning Root CA 2024 - Update to CKBI 2.90_v9.0.316 from NSS 3.126 Removing: - XRamp Global CA Root - ePKI Root Certification Authority - certSIGN ROOT CA - Explicitly Distrust DigiNotar Root CA - CommScope Public Trust ECC Root-01 - CommScope Public Trust ECC Root-02 - CommScope Public Trust RSA Root-01 - CommScope Public Trust RSA Root-02 - FIRMAPROFESIONAL CA ROOT-A WEB - SecureSign Root CA12 Adding: - OISTE Client Root ECC G1 - OISTE Client Root RSA G1 - OISTE Server Root ECC G1 - OISTE Server Root RSA G1 - e-Szigno TLS Root CA 2023 - SecureSign Root CA16 - SECOM TLS RSA Root CA 2024 - SECOM TLS ECC Root CA 2024 - SECOM SMIME RSA Root CA 2024 - Telia EC Email Root CA v3 - Telia EC TLS Root CA v3 - Telia RSA Email Root CA v3 - Telia RSA TLS Root CA v3 - certSIGN - Chunghwa Telecom Co., Ltd. - XRamp Global Certification Authority - Release bump to fix version overtaking - Update to CKBI 2.80_v9.0.304 from NSS 3.114 - Adding: - # Certificate "TWCA CYBER Root CA" - # Certificate "TWCA Global Root CA G2" - # Certificate "SecureSign Root CA12" - # Certificate "SecureSign Root CA14" - # Certificate "SecureSign Root CA15" - # Certificate "D-TRUST BR Root CA 2 2023" - # Certificate "TrustAsia SMIME ECC Root CA" - # Certificate "TrustAsia SMIME RSA Root CA" - # Certificate "TrustAsia TLS ECC Root CA" - # Certificate "TrustAsia TLS RSA Root CA" - # Certificate "D-TRUST EV Root CA 2 2023" - # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" - # Certificate "SwissSign RSA TLS Root CA 2022 - 1" - # Certificate "Sectigo Public Code Signing Root R46" - # Certificate "Sectigo Public Code Signing Root E46" - update License: field to SPDX - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1 - Removing: - # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" - # Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - # Certificate "Security Communication Root CA" - # Certificate "Camerfirma Chambers of Commerce Root" - # Certificate "Hongkong Post Root CA 1" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor ECA-1" - # Certificate "FNMT-RCM" - Adding: - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "D-Trust SBR Root CA 1 2022" - # Certificate "D-Trust SBR Root CA 2 2022" - # Certificate "Telekom Security SMIME ECC Root 2021" - # Certificate "Telekom Security TLS ECC Root 2020" - # Certificate "Telekom Security SMIME RSA Root 2023" - # Certificate "Telekom Security TLS RSA Root 2023" - # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB" - # Certificate "SECOM Trust.net" - # Certificate "Chambers of Commerce Root" - # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3" - # Certificate "SSL.com Code Signing RSA Root CA 2022" - # Certificate "SSL.com Code Signing ECC Root CA 2022" - Update to CKBI 2.60_v7.0.306 from NSS 3.91 - Removing: - # Certificate "Camerfirma Global Chambersign Root" - # Certificate "Staat der Nederlanden EV Root CA" - # Certificate "OpenTrust Root CA G1" - # Certificate "Swedish Government Root Authority v1" - # Certificate "DigiNotar Root CA G2" - # Certificate "Federal Common Policy CA" - # Certificate "TC TrustCenter Universal CA III" - # Certificate "CCA India 2007" - # Certificate "ipsCA Global CA Root" - # Certificate "ipsCA Main CA Root" - # Certificate "Macao Post eSignTrust Root Certification Authority" - # Certificate "InfoNotary CSP Root" - # Certificate "DigiNotar Root CA" - # Certificate "Root CA" - # Certificate "GPKIRootCA" - # Certificate "D-TRUST Qualified Root CA 1 2007:PN" - # Certificate "TC TrustCenter Universal CA I" - # Certificate "TC TrustCenter Universal CA II" - # Certificate "TC TrustCenter Class 2 CA II" - # Certificate "TC TrustCenter Class 4 CA II" - # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "CertRSA01" - # Certificate "KISA RootCA 3" - # Certificate "A-CERT ADVANCED" - # Certificate "A-Trust-Qual-01" - # Certificate "A-Trust-nQual-01" - # Certificate "Serasa Certificate Authority II" - # Certificate "TDC Internet" - # Certificate "America Online Root Certification Authority 2" - # Certificate "RSA Security Inc" - # Certificate "Public Notary Root" - # Certificate "Autoridade Certificadora Raiz Brasileira" - # Certificate "Post.Trust Root CA" - # Certificate "Entrust.net Secure Server Certification Authority" - # Certificate "ePKI EV SSL Certification Authority - G1" - Adding: - # Certificate "DigiCert TLS ECC P384 Root G5" - # Certificate "DigiCert TLS RSA4096 Root G5" - # Certificate "DigiCert SMIME ECC P384 Root G5" - # Certificate "DigiCert SMIME RSA4096 Root G5" - # Certificate "Certainly Root R1" - # Certificate "Certainly Root E1" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA" - # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - # Certificate "Symantec Enterprise Mobile Root for Microsoft" - # Certificate "A-Trust-Root-05" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "ATHEX Root CA" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "GeoTrust Primary Certification Authority" - # Certificate "thawte Primary Root CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5" - # Certificate "America Online Root Certification Authority 1" - # Certificate "Juur-SK" - # Certificate "ComSign CA" - # Certificate "ComSign Secured CA" - # Certificate "ComSign Advanced Security CA" - # Certificate "Global Chambersign Root" - # Certificate "Sonera Class2 CA" - # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3" - # Certificate "VeriSign, Inc." - # Certificate "GTE CyberTrust Global Root" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "Swiss Government Root CA III" - # Certificate "Application CA G4 Root" - # Certificate "SSC GDL CA Root A" - # Certificate "GlobalSign Code Signing Root E45" - # Certificate "GlobalSign Code Signing Root R45" - # Certificate "Entrust Code Signing Root Certification Authority - CSBR1" - Update to CKBI 2.54 from NSS 3.79 - Removing: - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor RootCert CA-1" - # Certificate "Network Solutions Certificate Authority" - # Certificate "COMODO Certification Authority" - # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "TWCA Root Certification Authority" - # Certificate "Izenpe.com" - # Certificate "state-institutions" - # Certificate "GlobalSign" - # Certificate "Common Policy" - # Certificate "A-Trust-nQual-03" - # Certificate "A-Trust-Qual-02" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Government Root Certification Authority" - # Certificate "AC Raíz Certicámara S.A." - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Stop using readdir_r [RH BZ 1423289]. - Fix name of directory in Makefile-generated tarball. - Use systemd interaction macros in specfile installation sections [RH BZ 850053]. - Fix the service file to use /usr/sbin/ rather than /sbin/. - Turn on RELRO and PIE build hardening in RPM builds. - Call setgroups() before calling setuid() (caught by rpmlint). - Note the correct licence. - Handle malformed kernel status correctly. - Permit culling to be disabled on the command line with the -N flag. - Suspend culling when cache space is short and cache objects are pinned. - Fix systemd service data according to review comments [RH BZ 754811]. - use Fedora CFLAGS in build (fixes build on s390) - SELinux userspace 2.9 release - destroy the class datum if it fails to initialize - SELinux userspace 2.8 release - SELinux userspace 2.8-rc3 release candidate - SELinux userspace 2.8-rc1 release candidate - Add support for the SCTP portcon keyword - build: follow standard semantics for DESTDIR and PREFIX - Use LDFLAGS from redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuild with libsepol-2.7-3 and libselinux-2.7-6 - alternatives: --keep-foreign incorrectly handles non-existent files - alternatives: isLink should return 0 in case of lstat error - spec: Replace not working awk command with sed (#63) - spec: Revert changes introduced in Fedora (#61) - spec: Add Provides /sbin/chkconfig in order to stay backwards compatible (#60) - spec: /sbin/chkconfig -> /usr/sbin/chkconfig (#59) - alternatives: tweak manpage to match the real 'remove' behavior (#58) - alternatives: add --keep-foreign (#57) - Translations update from Weblate - ci: Onboard chkconfig to Packit - zanata: remove zanata related stuff - Use make macros - alternatives: use one function for path cleaning - CI: specify more closely when to run CI - Add basic CI and README - spec: sync specfile with Fedora - spec: sync specfile with Fedora - makefile: Use rpmdev-bumpspec's legacy date option - Add feature to generate specfile entry, commit and archive - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Fix spelling of SELinux - Remove hardcoded systemd path - Package onboarded to gating - update to 4.5 (RHEL-21069 RHEL-10701) - update to 4.2 (#2062356) - fix chrony-helper to delete sources by their original name (#2061660) - update ntp2chrony script (#2018045 #2063766) - update to 4.1 (#1895003 #1847853 #1929157) - add NetworkManager dispatcher script to add servers from DHCP even without dhclient (#1933139) - restrict permissions of /var/lib/chrony and /var/log/chrony (#1939295) - reset chrony-helper state after stopping chronyd (#1971697) - add gcc-c++ and make to build requirements - move default paths in /var/run to /run - update to 3.5 (#1685469 #1677218) - fix shellcheck warnings in helper scripts (#1711948) - update ntp2chrony script - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2 (#1614800) - add workaround for late reload of unit file (#1614751) - move pidfile to /var/run/chrony to allow chronyd to remove it on exit (#1584585) - avoid blocking in getrandom system call (#1592425) - update to 3.3 - enable keyfile by default again - update ntp2chrony script - include ntp2chrony script in documentation (#1530987) - update to 3.3-pre1 - switch to nettle for crypto hashing - add gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - fix crash on reload command during start (RHEL-59112) - enable AES-CMAC support using gnutls (RHEL-59032) - update to 4.5 (RHEL-21069 RHEL-10701) - update to 4.2 (#2062356) - fix chrony-helper to delete sources by their original name (#2061660) - update ntp2chrony script (#2018045 #2063766) - update to 4.1 (#1895003 #1847853 #1929157) - add NetworkManager dispatcher script to add servers from DHCP even without dhclient (#1933139) - restrict permissions of /var/lib/chrony and /var/log/chrony (#1939295) - reset chrony-helper state after stopping chronyd (#1971697) - add gcc-c++ and make to build requirements - move default paths in /var/run to /run - update to 3.5 (#1685469 #1677218) - fix shellcheck warnings in helper scripts (#1711948) - update ntp2chrony script - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2 (#1614800) - add workaround for late reload of unit file (#1614751) - move pidfile to /var/run/chrony to allow chronyd to remove it on exit (#1584585) - avoid blocking in getrandom system call (#1592425) - update to 3.3 - enable keyfile by default again - update ntp2chrony script - include ntp2chrony script in documentation (#1530987) - update to 3.3-pre1 - switch to nettle for crypto hashing - add gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Update to 0.16 (#1144863) - Remove clean section and BuildRoot tag - Update URL and Sourc0 - Use license macro for COPYING - Use parallel make flags - Preserve timestamps during install - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Update to cifs-utils-7.0 - Resolves: rhbz#2163373 - Add manual gating tests - docs: cleanup rst formating - mount.cifs.rst: document new (no)handlecache mount option - manpage: update mount.cifs manpage with info about rdma option - checkopts: add python script to cross check mount options - mount.cifs.rst: document missing options, correct wrong ones - checkopts: report duplicated options in man page - mount.cifs.rst: more cleanups - mount.cifs.rst: document vers=3 mount option - mount.cifs.rst: document vers=3.02 mount option - cifs: Allow DNS resolver key to expire - mount.cifs: be more verbose and helpful regarding mount errors - Update mount.cifs with vers=default mount option and SMBv3.0.2 - mount.cifs.rst: update vers=3.1.1 option description - getcifsacl: Do not go to parse_sec_desc if getxattr fails. - getcifsacl: Improve help usage and add -h option. - setcifsacl: fix adding ACE when owner sid in unexpected location - cifs.upcall: fix a compiler warning - mount.cifs Add various missing parms from the help text - mount.cifs: add more options to help message - mount.cifs: detect GMT format of snapshot version - Update man page for mount.cifs to add new options - mount.cifs.rst: mention kernel version for snapshots - Fix authors and maintainers - Use Python 3 version of rst2man utility for generating man pages - update to 6.8 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - more updates, switch to rst for manpages - update mount.cifs manpage to describe defaults better (BZ#1474539) - pull in all patches merged since 6.7 was released - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - update to 6.7 release - resolves: RHEL-192933 - fix krb5 mount regression - cifs.upcall: remove getpwuid dependency - cifs.upcall: fix compiler warning with -Wvla - Resolves: RHEL-185759 - Fix CVE-2026-12505 - docs: update echo_interval description - Resolves: RHEL-80397 - mount.cifs.rst: add missing reference for sssd - mount.cifs.rst: update section about xattr/acl support - Resolves: RHEL-41059 - Update to cifs-utils-7.0 - Resolves: rhbz#2163373 - Add manual gating tests - docs: cleanup rst formating - mount.cifs.rst: document new (no)handlecache mount option - manpage: update mount.cifs manpage with info about rdma option - checkopts: add python script to cross check mount options - mount.cifs.rst: document missing options, correct wrong ones - checkopts: report duplicated options in man page - mount.cifs.rst: more cleanups - mount.cifs.rst: document vers=3 mount option - mount.cifs.rst: document vers=3.02 mount option - cifs: Allow DNS resolver key to expire - mount.cifs: be more verbose and helpful regarding mount errors - Update mount.cifs with vers=default mount option and SMBv3.0.2 - mount.cifs.rst: update vers=3.1.1 option description - getcifsacl: Do not go to parse_sec_desc if getxattr fails. - getcifsacl: Improve help usage and add -h option. - setcifsacl: fix adding ACE when owner sid in unexpected location - cifs.upcall: fix a compiler warning - mount.cifs Add various missing parms from the help text - mount.cifs: add more options to help message - mount.cifs: detect GMT format of snapshot version - Update man page for mount.cifs to add new options - mount.cifs.rst: mention kernel version for snapshots - Fix authors and maintainers - Use Python 3 version of rst2man utility for generating man pages - update to 6.8 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - more updates, switch to rst for manpages - update mount.cifs manpage to describe defaults better (BZ#1474539) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - Apps: Warn if appstream data package is missing - Shell: Redesign untrusted "add host" dialog - Storage: Partitions can be resized - many bug fixes - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - Apps: Warn if appstream data package is missing - Shell: Redesign untrusted "add host" dialog - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) - shell: Determine session idle time and countdown from clock time (RHEL-171011) - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - sosreport: Provide encryption pass via an env variable (RHEL-219123) - selinux: give cockpit_session_t Kerberos access (RHEL-185926) - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) - shell: Determine session idle time and countdown from clock time (RHEL-171011) - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - Apps: Warn if appstream data package is missing - Shell: Redesign untrusted "add host" dialog - Storage: Partitions can be resized - many bug fixes - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - Apps: Warn if appstream data package is missing - Shell: Redesign untrusted "add host" dialog - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) - shell: Determine session idle time and countdown from clock time (RHEL-171011) - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - sosreport: Provide encryption pass via an env variable (RHEL-219123) - selinux: give cockpit_session_t Kerberos access (RHEL-185926) - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) - shell: Determine session idle time and countdown from clock time (RHEL-171011) - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - Apps: Warn if appstream data package is missing - Shell: Redesign untrusted "add host" dialog - Storage: Partitions can be resized - many bug fixes - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - Apps: Warn if appstream data package is missing - Shell: Redesign untrusted "add host" dialog - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) - shell: Determine session idle time and countdown from clock time (RHEL-171011) - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - sosreport: Provide encryption pass via an env variable (RHEL-219123) - selinux: give cockpit_session_t Kerberos access (RHEL-185926) - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) - shell: Determine session idle time and countdown from clock time (RHEL-171011) - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - Apps: Warn if appstream data package is missing - Shell: Redesign untrusted "add host" dialog - Storage: Partitions can be resized - many bug fixes - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - Apps: Warn if appstream data package is missing - Shell: Redesign untrusted "add host" dialog - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) - shell: Determine session idle time and countdown from clock time (RHEL-171011) - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - sosreport: Provide encryption pass via an env variable (RHEL-219123) - selinux: give cockpit_session_t Kerberos access (RHEL-185926) - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) - shell: Determine session idle time and countdown from clock time (RHEL-171011) - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - Apps: Warn if appstream data package is missing - Shell: Redesign untrusted "add host" dialog - Storage: Partitions can be resized - many bug fixes - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - Apps: Warn if appstream data package is missing - Shell: Redesign untrusted "add host" dialog - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - Bug fixes - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - Kdump: Add Ansible/shell automation - Performance and stability improvements - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) - shell: Determine session idle time and countdown from clock time (RHEL-171011) - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Storage redesign - sosreport: Provide encryption pass via an env variable (RHEL-219123) - selinux: give cockpit_session_t Kerberos access (RHEL-185926) - ws: fix uninitialized read in tls-sniffing code - ws: tighten up branding path construction - pkg/systemd: robustify argument quoting [CVE-2026-4802] (RHEL-161386) - shell: Determine session idle time and countdown from clock time (RHEL-171011) - networking: Fix renaming of bridges and other groups (RHEL-131249) - networkmanager: use connection.type as a fallback (RHEL-131244) - Avoid faillocking account on changed sudo password (jira#RHEL-96193) - sosreport: Fix command injection with crafted report names [CVE-2024-2947] (jira#RHEL-30452) - Translation updates (jira#RHEL-16681) Lots of bug fixes - Storage: support for btrfs - Storage: improved support for swap - Storage: Introduce btrfs support - Fix connecting to remote hosts with OpenSSH 0.9.6 - Add compat-hwloc1 subpackage [1979150] - Add support for node 0 offline - Rebuild for 8.4.0 - Upgrade RHEL to 2.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop BR/R on rdma-core-devel on arm (bz#1780813) - Update to latest version (#1663624) - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - Upstream release 1.11.12. - BR rdma-core-devel even on arm. - conntrackd: set default hashtable buckets and max entries if not specified - Fix issues on Big Endian (rhbz#1750744) - Fix previous attempt at linking with -z lazy - Resolves: rhbz#1646885 [RHEL8] nfct tool lib have undefined symbol - enable systemd support - Use libtirpc - Use %license - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Add upstream patches (free pktb after use, nat_tuple leak) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - mountlist: recognize fuse.portal as dummy file system (#1952714) - split: fix --number=K/N to output correct part of file (#1921246) - rm: do not skip files upon failure to remove an empty dir (#1905481) - use statx instead of stat when available (#1760300) - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030) - fix formatting of sha512sum(1) man page (#1688744) - chcon: do not validate security context if SELinux is disabled (#1777831) - cp --preserve=xattr: preserve NFSv4 ACL extended attributes (#1646985) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - mountlist: recognize fuse.portal as dummy file system (#1952714) - split: fix --number=K/N to output correct part of file (#1921246) - rm: do not skip files upon failure to remove an empty dir (#1905481) - use statx instead of stat when available (#1760300) - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030) - fix formatting of sha512sum(1) man page (#1688744) - chcon: do not validate security context if SELinux is disabled (#1777831) - fold: fix processing of malformed UTF-8 sequences (RHEL-140117) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - mountlist: recognize fuse.portal as dummy file system (#1952714) - split: fix --number=K/N to output correct part of file (#1921246) - rm: do not skip files upon failure to remove an empty dir (#1905481) - use statx instead of stat when available (#1760300) - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030) - fix formatting of sha512sum(1) man page (#1688744) - unexpand: fix heap overflow when a wide blank overshoots a tab stop (RHEL-182699) - unexpand: fix stack overflow with large tabsizes (RHEL-182699) - fix df/direct.sh and unexpand/mb.sh tests (RHEL-151533) - fold: fix processing of malformed UTF-8 sequences (RHEL-140117) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - sort: fix buffer under-read CVE-2025-5278 (RHEL-216927) - unexpand: fix heap overflow when a wide blank overshoots a tab stop (RHEL-182699) - unexpand: fix stack overflow with large tabsizes (RHEL-182699) - fix df/direct.sh and unexpand/mb.sh tests (RHEL-151533) - fold: fix processing of malformed UTF-8 sequences (RHEL-140117) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - mountlist: recognize fuse.portal as dummy file system (#1952714) - split: fix --number=K/N to output correct part of file (#1921246) - rm: do not skip files upon failure to remove an empty dir (#1905481) - use statx instead of stat when available (#1760300) - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030) - fix formatting of sha512sum(1) man page (#1688744) - chcon: do not validate security context if SELinux is disabled (#1777831) - cp --preserve=xattr: preserve NFSv4 ACL extended attributes (#1646985) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - mountlist: recognize fuse.portal as dummy file system (#1952714) - split: fix --number=K/N to output correct part of file (#1921246) - rm: do not skip files upon failure to remove an empty dir (#1905481) - use statx instead of stat when available (#1760300) - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030) - fix formatting of sha512sum(1) man page (#1688744) - chcon: do not validate security context if SELinux is disabled (#1777831) - fold: fix processing of malformed UTF-8 sequences (RHEL-140117) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - mountlist: recognize fuse.portal as dummy file system (#1952714) - split: fix --number=K/N to output correct part of file (#1921246) - rm: do not skip files upon failure to remove an empty dir (#1905481) - use statx instead of stat when available (#1760300) - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030) - fix formatting of sha512sum(1) man page (#1688744) - unexpand: fix heap overflow when a wide blank overshoots a tab stop (RHEL-182699) - unexpand: fix stack overflow with large tabsizes (RHEL-182699) - fix df/direct.sh and unexpand/mb.sh tests (RHEL-151533) - fold: fix processing of malformed UTF-8 sequences (RHEL-140117) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - sort: fix buffer under-read CVE-2025-5278 (RHEL-216927) - unexpand: fix heap overflow when a wide blank overshoots a tab stop (RHEL-182699) - unexpand: fix stack overflow with large tabsizes (RHEL-182699) - fix df/direct.sh and unexpand/mb.sh tests (RHEL-151533) - fold: fix processing of malformed UTF-8 sequences (RHEL-140117) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - mountlist: recognize fuse.portal as dummy file system (#1952714) - split: fix --number=K/N to output correct part of file (#1921246) - rm: do not skip files upon failure to remove an empty dir (#1905481) - use statx instead of stat when available (#1760300) - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030) - fix formatting of sha512sum(1) man page (#1688744) - chcon: do not validate security context if SELinux is disabled (#1777831) - cp --preserve=xattr: preserve NFSv4 ACL extended attributes (#1646985) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - mountlist: recognize fuse.portal as dummy file system (#1952714) - split: fix --number=K/N to output correct part of file (#1921246) - rm: do not skip files upon failure to remove an empty dir (#1905481) - use statx instead of stat when available (#1760300) - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030) - fix formatting of sha512sum(1) man page (#1688744) - chcon: do not validate security context if SELinux is disabled (#1777831) - fold: fix processing of malformed UTF-8 sequences (RHEL-140117) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - mountlist: recognize fuse.portal as dummy file system (#1952714) - split: fix --number=K/N to output correct part of file (#1921246) - rm: do not skip files upon failure to remove an empty dir (#1905481) - use statx instead of stat when available (#1760300) - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030) - fix formatting of sha512sum(1) man page (#1688744) - unexpand: fix heap overflow when a wide blank overshoots a tab stop (RHEL-182699) - unexpand: fix stack overflow with large tabsizes (RHEL-182699) - fix df/direct.sh and unexpand/mb.sh tests (RHEL-151533) - fold: fix processing of malformed UTF-8 sequences (RHEL-140117) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - tail: fix stack out-of-bounds write with --follow (#1974784) - sort: fix buffer under-read CVE-2025-5278 (RHEL-216927) - unexpand: fix heap overflow when a wide blank overshoots a tab stop (RHEL-182699) - unexpand: fix stack overflow with large tabsizes (RHEL-182699) - fix df/direct.sh and unexpand/mb.sh tests (RHEL-151533) - fold: fix processing of malformed UTF-8 sequences (RHEL-140117) - fix du being killed by SIGABRT on mutating xfs systems (RHEL-124174) - basic support for checking NFSv4 ACLs (#2158747) - prevent unexpand from failing on control characters (#2112870) - ls, stat: avoid triggering automounts (#2044981) - make `df --direct` work again (#2058686) - doc: improve description of the --kibibytes option of ls (#1527391) - df: fix duplicated remote entries due to bind mounts (#1962515) - Fixed CVE-2021-38185 (#1992511) - Fixed improper input validation when writing tar header fields (#1766223) - Extract: retain times for symlinks (#1487673) - cleanup, sync with rawhide - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - (re)generate manual page for new options - Fix regression in dictionary creation and lookup - Updated translations - Drop Python 2 support in RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Add Provides for the old name without %_isa - Python 2 binary package renamed to python2-cracklib See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix regression in dictionary creation and lookup - Updated translations - Drop Python 2 support in RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Add Provides for the old name without %_isa - Python 2 binary package renamed to python2-cracklib See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Escape macros in %changelog - Update wireless-regdb to 2018.05.31 - Remove python2 dependency - Use sforshee signed reulatory.bin (required by modern kernels) - Remove crda package, since kernel 4.15 is sufficient to provide only wireless-regdb package - Bump NVR to test CI-related build changes - Correct Release value for preceding changelog entry - Update to wireless-regdb 2020.04.29 release for additional US spectrum - Resolves: rhbz#1892700 - Bump release because of CI issues - Related: RHEL-2609 - Add `optimization_to_close_fds.patch` - Resolves: RHEL-2609 - Set 'missingok' for /etc/cron.deny to not recreate it on update - Add support for "~" ("random within range") Resolves: rhbz#1832510 - Use system-auth for PAM authentication Resolves: rhbz#2005526 - Create PID files even when crond does not fork Resolves: rhbz#1926300 - Make crond restart on failure - Resolves: rhbz#1715137 - use role from the current context for system crontabs - Resolves: rhbz#1708557 - Covscan issues review - Fix potential memory leaks - Fix unsafe code - Resolves: rhbz#1602467 - new upstream release 1.5.2 - Bump release because of CI issues - Related: RHEL-2609 - Add `optimization_to_close_fds.patch` - Resolves: RHEL-2609 - Set 'missingok' for /etc/cron.deny to not recreate it on update - Add support for "~" ("random within range") Resolves: rhbz#1832510 - Use system-auth for PAM authentication Resolves: rhbz#2005526 - Create PID files even when crond does not fork Resolves: rhbz#1926300 - Make crond restart on failure - Resolves: rhbz#1715137 - use role from the current context for system crontabs - Resolves: rhbz#1708557 - Covscan issues review - Fix potential memory leaks - Fix unsafe code - Resolves: rhbz#1602467 - new upstream release 1.5.2 - Bump release because of CI issues - Related: RHEL-2609 - Add `optimization_to_close_fds.patch` - Resolves: RHEL-2609 - Set 'missingok' for /etc/cron.deny to not recreate it on update - Add support for "~" ("random within range") Resolves: rhbz#1832510 - Use system-auth for PAM authentication Resolves: rhbz#2005526 - Create PID files even when crond does not fork Resolves: rhbz#1926300 - Make crond restart on failure - Resolves: rhbz#1715137 - use role from the current context for system crontabs - Resolves: rhbz#1708557 - Covscan issues review - Fix potential memory leaks - Fix unsafe code - Resolves: rhbz#1602467 - new upstream release 1.5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - fix license handling - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - fix logging of PID in the finished line (#1236841) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - use Recommends to pull in cronie (#1269172) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to the latest release - add sed require - remove %clean section - remove obsolete Group tag - fix upstream URL - Resolves: rhbz#1696449, rhbz#1703982 - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones - krb5: fix policy generator to account for macs - docs: replace `FIPS 140-2` with just `FIPS 140` - bind: expand the list of disableable algorithms - tests/java: fix java.security.disableSystemPropertiesFile=true - stop accidentally creating /etc/crypto-policies/back-ends/.config symlink - OSPP: relax -ECDSA-SHA2-512, -FFDHE-* - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific) - libssh: enable diffie-hellman-group14-sha256 support - openssl: fix disabling ChaCha20 - implement scoped policies, e.g., cipher@SSH = ... (#1960266) - implement algorithm globbing, e.g., cipher@SSH = -*-CBC - deprecate derived properties: tls_cipher, ssh_cipher, ssh_group, ike_protocol - deprecate sha1_in_dnssec property - deprecate unscoped form of protocol property - update documentation - expand upstream test coverage - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522) - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846) - stop claiming Camellia is disabled (#1925104) - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016) - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755) - condition ecdh-sha2-nistp384 on SECP384R1 - OSPP subpolicy: tweak for RHEL-8.3+ - libssh: respect ssh_certs - OSPP subpolicy: remove AES-CCM - openssl: handle the AES-CCM removal properly - disallow X448/ED448 in FIPS policy with gnutls >= 3.6.12 - add AD-SUPPORT policy module - fallback to FIPS policy instead of the default-config in FIPS mode - java: Document properly how to override the crypto policy - krb5: No support for 3des anymore - reorder the signature algorithms to follow the order in default openssl list - make the post script work in environments where /proc/sys is not available - automatically set up FIPS policy in FIPS mode on first install - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones - krb5: fix policy generator to account for macs - docs: replace `FIPS 140-2` with just `FIPS 140` - bind: expand the list of disableable algorithms - tests/java: fix java.security.disableSystemPropertiesFile=true - stop accidentally creating /etc/crypto-policies/back-ends/.config symlink - OSPP: relax -ECDSA-SHA2-512, -FFDHE-* - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific) - libssh: enable diffie-hellman-group14-sha256 support - openssl: fix disabling ChaCha20 - implement scoped policies, e.g., cipher@SSH = ... (#1960266) - implement algorithm globbing, e.g., cipher@SSH = -*-CBC - deprecate derived properties: tls_cipher, ssh_cipher, ssh_group, ike_protocol - deprecate sha1_in_dnssec property - deprecate unscoped form of protocol property - update documentation - expand upstream test coverage - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522) - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846) - stop claiming Camellia is disabled (#1925104) - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016) - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755) - condition ecdh-sha2-nistp384 on SECP384R1 - OSPP subpolicy: tweak for RHEL-8.3+ - libssh: respect ssh_certs - OSPP subpolicy: remove AES-CCM - openssl: handle the AES-CCM removal properly - disallow X448/ED448 in FIPS policy with gnutls >= 3.6.12 - add AD-SUPPORT policy module - fallback to FIPS policy instead of the default-config in FIPS mode - java: Document properly how to override the crypto policy - krb5: No support for 3des anymore - reorder the signature algorithms to follow the order in default openssl list - make the post script work in environments where /proc/sys is not available - automatically set up FIPS policy in FIPS mode on first install - Rebuild due to missing CI environment - Resolves: #2212772 #2193342 - patch: Delegate FIPS mode detection to configured crypto backend - patch: Disallow use of internal kenrel crypto driver names in "capi" - patch: Also disallow active devices with internal kernel names - patch: Fix init_by_name to allow unknown cipher format in dm-crypt - patch: Fix reencryption to fail properly for unknown cipher - patch: Fix activation of LUKS2 with capi format cipher and kernel - Resolves: #2212772 #2193342 - change cryptsetup-devel dependency from cryptsetup to cryptsetup-libs - Resolves: #2150254 - patch: Remove LUKS2 encryption data size restriction. - patch: Abort encryption when header and data devices are same. - Resolves: #2150254 - patch: Fix internal crypt segment compare routine - Resolves: #2110810 - patch: Fix cryptsetup --test-passphrase when device in reencryption - Resolves: #2058009 - update to cryptsetup 2.3.7 - fixes CVE-2021-4122 - patch: Fix suboptimal optimization in bundled argon2. - patch: Fix bogus memory allocation/device read with invalid LUKS2 headers - patch: Fix typo in luksRepair prompt. - Resolves: #2021815 #2022301 #2031859 - patch: Fix reencryption for custom devices with data segments set to use cipher_null. - Resolves: #1927409 - patch: Fix crypto backend to properly handle ECB mode. - Resolves: #1859091 - patch: Fix possible memory corruption in LUKS2 validation code in 32bit library. - Resolves: #1872294 - Rebuild due to missing CI environment - Resolves: #2212772 #2193342 - patch: Delegate FIPS mode detection to configured crypto backend - patch: Disallow use of internal kenrel crypto driver names in "capi" - patch: Also disallow active devices with internal kernel names - patch: Fix init_by_name to allow unknown cipher format in dm-crypt - patch: Fix reencryption to fail properly for unknown cipher - patch: Fix activation of LUKS2 with capi format cipher and kernel - Resolves: #2212772 #2193342 - change cryptsetup-devel dependency from cryptsetup to cryptsetup-libs - Resolves: #2150254 - patch: Remove LUKS2 encryption data size restriction. - patch: Abort encryption when header and data devices are same. - Resolves: #2150254 - patch: Fix internal crypt segment compare routine - Resolves: #2110810 - patch: Fix cryptsetup --test-passphrase when device in reencryption - Resolves: #2058009 - update to cryptsetup 2.3.7 - fixes CVE-2021-4122 - patch: Fix suboptimal optimization in bundled argon2. - patch: Fix bogus memory allocation/device read with invalid LUKS2 headers - patch: Fix typo in luksRepair prompt. - Resolves: #2021815 #2022301 #2031859 - patch: Fix reencryption for custom devices with data segments set to use cipher_null. - Resolves: #1927409 - patch: Fix crypto backend to properly handle ECB mode. - Resolves: #1859091 - patch: Fix possible memory corruption in LUKS2 validation code in 32bit library. - Resolves: #1872294 - Rebuild due to missing CI environment - Resolves: #2212772 #2193342 - patch: Delegate FIPS mode detection to configured crypto backend - patch: Disallow use of internal kenrel crypto driver names in "capi" - patch: Also disallow active devices with internal kernel names - patch: Fix init_by_name to allow unknown cipher format in dm-crypt - patch: Fix reencryption to fail properly for unknown cipher - patch: Fix activation of LUKS2 with capi format cipher and kernel - Resolves: #2212772 #2193342 - change cryptsetup-devel dependency from cryptsetup to cryptsetup-libs - Resolves: #2150254 - patch: Remove LUKS2 encryption data size restriction. - patch: Abort encryption when header and data devices are same. - Resolves: #2150254 - patch: Fix internal crypt segment compare routine - Resolves: #2110810 - patch: Fix cryptsetup --test-passphrase when device in reencryption - Resolves: #2058009 - update to cryptsetup 2.3.7 - fixes CVE-2021-4122 - patch: Fix suboptimal optimization in bundled argon2. - patch: Fix bogus memory allocation/device read with invalid LUKS2 headers - patch: Fix typo in luksRepair prompt. - Resolves: #2021815 #2022301 #2031859 - patch: Fix reencryption for custom devices with data segments set to use cipher_null. - Resolves: #1927409 - patch: Fix crypto backend to properly handle ECB mode. - Resolves: #1859091 - patch: Fix possible memory corruption in LUKS2 validation code in 32bit library. - Resolves: #1872294 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - revert RHEL-19200 - no new subpackages are needed - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off" - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost - RHEL-2612 - cups pulls an unneeded dependency on python3 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation - 2217178 - Delays printing to lpd when reserved ports are exhausted - 2217283 - The command "cancel -x <job>" does not remove job files - 2217955 - Enlarge backlog queue for listen() in cupsd - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c - CVE-2023-32324 cups: heap buffer overflow may lead to DoS - RHEL-316 - Enable fmf tests in centos stream - 2130391 - Kerberized IPP Printing Fails - 1910415 - corrected manpage patch, one lpoptions usage wasn't changed - 1910415 - manpage update to acknowledge order dependency of -h option - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Require cups.socket in cupsd service file - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 - revert RHEL-19200 - no new subpackages are needed - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off" - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost - RHEL-2612 - cups pulls an unneeded dependency on python3 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation - 2217178 - Delays printing to lpd when reserved ports are exhausted - 2217283 - The command "cancel -x <job>" does not remove job files - 2217955 - Enlarge backlog queue for listen() in cupsd - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c - CVE-2023-32324 cups: heap buffer overflow may lead to DoS - RHEL-316 - Enable fmf tests in centos stream - RHEL-54038 cups source rpm doesn't actually build lspp support - fix memory leaks caused by lspp - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Require cups.socket in cupsd service file - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 - revert RHEL-19200 - no new subpackages are needed - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off" - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost - RHEL-2612 - cups pulls an unneeded dependency on python3 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation - 2217178 - Delays printing to lpd when reserved ports are exhausted - 2217283 - The command "cancel -x <job>" does not remove job files - 2217955 - Enlarge backlog queue for listen() in cupsd - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c - CVE-2023-32324 cups: heap buffer overflow may lead to DoS - RHEL-60338 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-54038 cups source rpm doesn't actually build lspp support - fix memory leaks caused by lspp - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Require cups.socket in cupsd service file - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 - revert RHEL-19200 - no new subpackages are needed - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off" - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost - RHEL-2612 - cups pulls an unneeded dependency on python3 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation - RHEL-112424 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-60338 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-54038 cups source rpm doesn't actually build lspp support - fix memory leaks caused by lspp - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Require cups.socket in cupsd service file - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 - revert RHEL-19200 - no new subpackages are needed - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off" - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost - RHEL-2612 - cups pulls an unneeded dependency on python3 - RHEL-122045 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-112424 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-60338 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-54038 cups source rpm doesn't actually build lspp support - fix memory leaks caused by lspp - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Require cups.socket in cupsd service file - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 - revert RHEL-19200 - no new subpackages are needed - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off" - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost - fix use-after-free reported by OSH - RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129720 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122045 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-112424 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-60338 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-54038 cups source rpm doesn't actually build lspp support - fix memory leaks caused by lspp - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Require cups.socket in cupsd service file - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 - revert RHEL-19200 - no new subpackages are needed - RHEL-147205 - endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129720 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122045 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-112424 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-60338 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-54038 cups source rpm doesn't actually build lspp support - fix memory leaks caused by lspp - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Require cups.socket in cupsd service file - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777 - RHEL-177947 CVE-2026-34980 cups: control character injection in option values - RHEL-147205 - endless poll loop in http_write when POLLHUP is returned - fix use-after-free reported by OSH - RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129720 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-122045 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-112424 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-60338 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-54038 cups source rpm doesn't actually build lspp support - fix memory leaks caused by lspp - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Delete the domain socket file after stopping the cups.socket service - Fix cupsd Listener checks - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777 - Require cups.socket in cupsd service file - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337) - control code in cookie denial of service (CVE-2022-35252) - setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703) - fix HTTP compression denial of service (CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - noproxy: support proxies specified using cidr notation (RHEL-86910) - disable test1456 (requires test framework features not in 7.61.1) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - NTLM: use HTTP/1.0 instead of HTTP/1.1 for compatibility (RHEL-171912) - noproxy: support proxies specified using cidr notation (RHEL-86910) - disable test1456 (requires test framework features not in 7.61.1) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - Fix for CVE-2022-24407 - Resolves: rhbz#2055846 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 - Backport fix for CVE-2019-19906 - Resolves: rhbz#1804036 - Rc7 to final source - Resovles bz#1618744 - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL - Resolves bz#1618744 - Fix multilib issue bz#1663120 - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream (pre-)release - Import LDFLAGS from redhat-rpm-config (#1548437) - Fix for CVE-2022-24407 - Resolves: rhbz#2055846 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 - Backport fix for CVE-2019-19906 - Resolves: rhbz#1804036 - Rc7 to final source - Resovles bz#1618744 - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL - Resolves bz#1618744 - Fix multilib issue bz#1663120 - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream (pre-)release - Import LDFLAGS from redhat-rpm-config (#1548437) - Fix for CVE-2022-24407 - Resolves: rhbz#2055846 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 - Backport fix for CVE-2019-19906 - Resolves: rhbz#1804036 - Rc7 to final source - Resovles bz#1618744 - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL - Resolves bz#1618744 - Fix multilib issue bz#1663120 - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream (pre-)release - Import LDFLAGS from redhat-rpm-config (#1548437) - Fix for CVE-2022-24407 - Resolves: rhbz#2055846 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 - Backport fix for CVE-2019-19906 - Resolves: rhbz#1804036 - Rc7 to final source - Resovles bz#1618744 - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL - Resolves bz#1618744 - Fix multilib issue bz#1663120 - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream (pre-)release - Import LDFLAGS from redhat-rpm-config (#1548437) - Fix for CVE-2022-24407 - Resolves: rhbz#2055846 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 - Backport fix for CVE-2019-19906 - Resolves: rhbz#1804036 - Rc7 to final source - Resovles bz#1618744 - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL - Resolves bz#1618744 - Fix multilib issue bz#1663120 - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream (pre-)release - Import LDFLAGS from redhat-rpm-config (#1548437) - Fix for CVE-2022-24407 - Resolves: rhbz#2055846 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 - Backport fix for CVE-2019-19906 - Resolves: rhbz#1804036 - Rc7 to final source - Resovles bz#1618744 - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL - Resolves bz#1618744 - Fix multilib issue bz#1663120 - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream (pre-)release - Import LDFLAGS from redhat-rpm-config (#1548437) - Fix for CVE-2022-24407 - Resolves: rhbz#2055846 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 - Backport fix for CVE-2019-19906 - Resolves: rhbz#1804036 - Rc7 to final source - Resovles bz#1618744 - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL - Resolves bz#1618744 - Fix multilib issue bz#1663120 - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream (pre-)release - Import LDFLAGS from redhat-rpm-config (#1548437) - Fix for CVE-2022-24407 - Resolves: rhbz#2055846 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 - Backport fix for CVE-2019-19906 - Resolves: rhbz#1804036 - Rc7 to final source - Resovles bz#1618744 - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL - Resolves bz#1618744 - Fix multilib issue bz#1663120 - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream (pre-)release - Import LDFLAGS from redhat-rpm-config (#1548437) - Fix for CVE-2022-24407 - Resolves: rhbz#2055846 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 - Backport fix for CVE-2019-19906 - Resolves: rhbz#1804036 - Rc7 to final source - Resovles bz#1618744 - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL - Resolves bz#1618744 - Fix multilib issue bz#1663120 - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream (pre-)release - Import LDFLAGS from redhat-rpm-config (#1548437) - Fix for CVE-2022-24407 - Resolves: rhbz#2055846 - Reduce excessive GSSAPI plugin logging - Resolves: rhbz#1274734 - Add support for setting maxssf=0 in GSS-SPNEGO - Resolves: rhbz#1822133 - Backport GSSAPI Channel Bindings support - Resolves: rhbz#1817054 - Backport fix for CVE-2019-19906 - Resolves: rhbz#1804036 - Rc7 to final source - Resovles bz#1618744 - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL - Resolves bz#1618744 - Fix multilib issue bz#1663120 - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream (pre-)release - Import LDFLAGS from redhat-rpm-config (#1548437) - Another bump to fix gating tests - Resolves: rhbz#2141031 - Bump release for a rebuild - Resolves: rhbz#2141031 - Sync test harness with kernel updates. (Jeff Moyer) - Resolves: rhbz#2141031 - Pull in fixes from upstream v72 and v73 (Jeff Moyer) - Fix enable-namespace all reporting errors incorrectly - Add support for inject-smart on papr scm - Related: bz#2090190 bz#1986185 bz#2040074 - Rebuild with latest json-c version - Related: bz#2021816 - Get rid of confusing message when deleting all namespaces - Related: bz#1782182 - Update to v71.1 to pull in ppc support. - Related: bz#1782182 - Fix up botched change to nvdimm-security.conf (Jeff Moyer) - Related: bz#1724531 - Rebase to v67. This brings in the following features: - support for the 'security frozen' sysfs attribute - support for using pmem as system ram - various cleanup and bug fixes - Fix load-keys failure in initramfs (Jeff Moyer) - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889 - Rebase to v65. - Resolves: bz#1665407 bz#1634349 - Another bump to fix gating tests - Resolves: rhbz#2141031 - Bump release for a rebuild - Resolves: rhbz#2141031 - Sync test harness with kernel updates. (Jeff Moyer) - Resolves: rhbz#2141031 - Pull in fixes from upstream v72 and v73 (Jeff Moyer) - Fix enable-namespace all reporting errors incorrectly - Add support for inject-smart on papr scm - Related: bz#2090190 bz#1986185 bz#2040074 - Rebuild with latest json-c version - Related: bz#2021816 - Get rid of confusing message when deleting all namespaces - Related: bz#1782182 - Update to v71.1 to pull in ppc support. - Related: bz#1782182 - Fix up botched change to nvdimm-security.conf (Jeff Moyer) - Related: bz#1724531 - Rebase to v67. This brings in the following features: - support for the 'security frozen' sysfs attribute - support for using pmem as system ram - various cleanup and bug fixes - Fix load-keys failure in initramfs (Jeff Moyer) - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889 - Rebase to v65. - Resolves: bz#1665407 bz#1634349 - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Improve SSH session bus starting (#1940067) - Add Conflicts on older redhat-release versions (#1941642) - Resolves: RHEL-65330 (Crash on configuration reload) - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Improve SSH session bus starting (#1940067) - Fix SSH forwarding with csh (RHEL-4156) - Resolves: RHEL-65330 (Crash on configuration reload) - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Improve SSH session bus starting (#1940067) - Add Conflicts on older redhat-release versions (#1941642) - Resolves: RHEL-65330 (Crash on configuration reload) - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Improve SSH session bus starting (#1940067) - Fix SSH forwarding with csh (RHEL-4156) - Resolves: RHEL-65330 (Crash on configuration reload) - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Improve SSH session bus starting (#1940067) - Add Conflicts on older redhat-release versions (#1941642) - Resolves: RHEL-65330 (Crash on configuration reload) - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Improve SSH session bus starting (#1940067) - Fix SSH forwarding with csh (RHEL-4156) - Resolves: RHEL-65330 (Crash on configuration reload) - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 0.110 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.108 - Enable tests - Remove obsolete Requires and Obsoletes - Update to 0.106 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - Update to 0.104 - Remove RPATH - Remove executable bit from sourced script - Move man page to main package and update glob - Make the build output more verbose - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Improve SSH session bus starting (#1940067) - Add Conflicts on older redhat-release versions (#1941642) - Resolves: RHEL-65330 (Crash on configuration reload) - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Improve SSH session bus starting (#1940067) - Fix SSH forwarding with csh (RHEL-4156) - Resolves: RHEL-65330 (Crash on configuration reload) - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Improve SSH session bus starting (#1940067) - Add Conflicts on older redhat-release versions (#1941642) - Resolves: RHEL-65330 (Crash on configuration reload) - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - Improve SSH session bus starting (#1940067) - Fix SSH forwarding with csh (RHEL-4156) - Resolves: RHEL-65330 (Crash on configuration reload) - Fix CVE-2023-34969 (#2213400) - Ensure only one dbus-daemon is spawned for all shells sharing a single connection. Resolves: #2189201 - Fix CVE-2022-42010 (#2133645) - Fix CVE-2022-42011 (#2133639) - Fix CVE-2022-42011 (#2133633) - Address race for very short running sessions in SSH session monitoring script. Related: #2089362 - Use hangup signal instead of termination signal to kill sesssion monitoring script to appeach tcsh. Related: #2089362 - Override sysusers configuration (#2090397) - Ensure SSH session monitoring script is cleaned up when the session exits. Resolves: #2089362 - Ensure session bus started for SSH sessions gets used by those sessions. Related: #1940067 - 2.34-2 - Resolves:rh#880473 - drop Conflicts: lines from spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Add a MetaInfo file for the software center; this is a font we want to show. - Update to new upstream release (2.35). - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Bump a release number to include more sub-packages. Resolves: rhbz#1857213 - 2.34-2 - Resolves:rh#880473 - drop Conflicts: lines from spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Add a MetaInfo file for the software center; this is a font we want to show. - Update to new upstream release (2.35). - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Bump a release number to include more sub-packages. Resolves: rhbz#1857213 - 2.34-2 - Resolves:rh#880473 - drop Conflicts: lines from spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Add a MetaInfo file for the software center; this is a font we want to show. - Update to new upstream release (2.35). - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Bump a release number to include more sub-packages. Resolves: rhbz#1857213 - 2.34-2 - Resolves:rh#880473 - drop Conflicts: lines from spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Add a MetaInfo file for the software center; this is a font we want to show. - Update to new upstream release (2.35). - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Bump a release number to include more sub-packages. Resolves: rhbz#1857213 - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Exit with error when --devicesfile used does not exist. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Allow integrity to use multiple segments for metadata. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Exit with error when --devicesfile used does not exist. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Allow integrity to use multiple segments for metadata. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Exit with error when --devicesfile used does not exist. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Allow integrity to use multiple segments for metadata. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Exit with error when --devicesfile used does not exist. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Allow integrity to use multiple segments for metadata. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch * Fixes bz #2141996 - Modify tests/multipath_conf_syntax/main.sh * fix unrelated test error - Resolves: bz #2141996 - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch * Fixes bz #2128885 - Add 0117-libmultipath-cleanup-remove_feature.patch - Add 0118-libmultipath-cleanup-add_feature.patch - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch * Fixes bz #2022359 - Resolves: bz #2022359, #2128885 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch * Fixes bz #2141996 - Modify tests/multipath_conf_syntax/main.sh * fix unrelated test error - Resolves: bz #2141996 - Add 0139-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch * Fixes RHEL-126675 ("RHEL 8.10 mpathpersist -i --report-capabilities -d returns the wrong results") - Resolves: RHEL-126675 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0140-libmultipath-set-offline-whenever-path-is-not-online.patch * Fixes RHEL-131907 ("multipathd doesn't print checker messages for some offline path states") - Resolves: RHEL-131907 - Add 0139-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch * Fixes RHEL-126675 ("RHEL 8.10 mpathpersist -i --report-capabilities -d returns the wrong results") - Resolves: RHEL-126675 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch * Fixes bz #2141996 - Modify tests/multipath_conf_syntax/main.sh * fix unrelated test error - Resolves: bz #2141996 - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch * Fixes bz #2128885 - Add 0117-libmultipath-cleanup-remove_feature.patch - Add 0118-libmultipath-cleanup-add_feature.patch - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch * Fixes bz #2022359 - Resolves: bz #2022359, #2128885 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch * Fixes bz #2141996 - Modify tests/multipath_conf_syntax/main.sh * fix unrelated test error - Resolves: bz #2141996 - Add 0139-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch * Fixes RHEL-126675 ("RHEL 8.10 mpathpersist -i --report-capabilities -d returns the wrong results") - Resolves: RHEL-126675 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0140-libmultipath-set-offline-whenever-path-is-not-online.patch * Fixes RHEL-131907 ("multipathd doesn't print checker messages for some offline path states") - Resolves: RHEL-131907 - Add 0139-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch * Fixes RHEL-126675 ("RHEL 8.10 mpathpersist -i --report-capabilities -d returns the wrong results") - Resolves: RHEL-126675 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Improve duration of thin_repair on very large metadata devices. - Allows --clear-needs-check with --super-block-only or --skip-mappings. - Fix several corner cases in thin_repair. - Fix thin_repair clearing needs_check flag in repaired metadata. - Fix rust-1.53 compilation issues. - Remove libboost_iostreams dependency. - Update to upstream version 0.9.0. - Fix important issues found by static analysis. - Update crc32c to version 0.5 supporting non x86 architectures. - New tools thin_metadata_pack and thin_metadata_unpack. - Under-populated btree nodes are non fatal to thin_check. - Remove obsolete pool-inactive option from thin_trim man page. - Check input file exists eralier, and prevent writing incorrect metadata. - Bump release - Rebuild because of bind ABI changes related to CVE-2023-50387 - Fix for CVE-2022-2928 - Fix for CVE-2022-2929 - send back dhcp6.vendor-opts again (#2142024) - omshell: add support for hmac-sha512 algorithm (#2016248) - Rebuilt on a new side-tag (#2022715) - Rebuild with new bind (#2022715) - Fix for CVE-2021-25217 - Rebuild with new bind (#1904613) - Drop 12-dhcp NM dispatchers script (#1898423) - Add key-algorithm support. - Resolves: rhbz#1883999 - Rebuild with bind-9.11.18 - Rebuild because of bind ABI changes related to CVE-2023-50387 - Fix for CVE-2022-2928 - Fix for CVE-2022-2929 - send back dhcp6.vendor-opts again (#2142024) - omshell: add support for hmac-sha512 algorithm (#2016248) - Rebuilt on a new side-tag (#2022715) - Rebuild with new bind (#2022715) - Fix for CVE-2021-25217 - Rebuild with new bind (#1904613) - Drop 12-dhcp NM dispatchers script (#1898423) - Add key-algorithm support. - Resolves: rhbz#1883999 - Rebuild with bind-9.11.18 - Rebuild because of bind ABI changes related to CVE-2023-50387 - Fix for CVE-2022-2928 - Fix for CVE-2022-2929 - send back dhcp6.vendor-opts again (#2142024) - omshell: add support for hmac-sha512 algorithm (#2016248) - Rebuilt on a new side-tag (#2022715) - Rebuild with new bind (#2022715) - Fix for CVE-2021-25217 - Rebuild with new bind (#1904613) - Drop 12-dhcp NM dispatchers script (#1898423) - Add key-algorithm support. - Resolves: rhbz#1883999 - Rebuild with bind-9.11.18 - Rebuild because of bind ABI changes related to CVE-2023-50387 - Fix for CVE-2022-2928 - Fix for CVE-2022-2929 - send back dhcp6.vendor-opts again (#2142024) - omshell: add support for hmac-sha512 algorithm (#2016248) - Rebuilt on a new side-tag (#2022715) - Rebuild with new bind (#2022715) - Fix for CVE-2021-25217 - Rebuild with new bind (#1904613) - Drop 12-dhcp NM dispatchers script (#1898423) - Add key-algorithm support. - Resolves: rhbz#1883999 - Rebuild with bind-9.11.18 - Rebuild because of bind ABI changes related to CVE-2023-50387 - Fix for CVE-2022-2928 - Fix for CVE-2022-2929 - send back dhcp6.vendor-opts again (#2142024) - omshell: add support for hmac-sha512 algorithm (#2016248) - Rebuilt on a new side-tag (#2022715) - Rebuild with new bind (#2022715) - Fix for CVE-2021-25217 - Rebuild with new bind (#1904613) - Drop 12-dhcp NM dispatchers script (#1898423) - Add key-algorithm support. - Resolves: rhbz#1883999 - Rebuild with bind-9.11.18 - Resolves: #1732960 - cmp -b shows incorrect data - Resolves: #1606949, covscan issues - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - 3.6 (bug #1453019). - backport to fix FTBFs with GCC 7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 3.5 (bug #1365325). - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - update to 4.1.0 - dlm_controld: use new quorum api to detect missed failures - kick gating system - try to kick gating system - update to 4.0.9 - dlm_controld: ignore unwanted uevent strings - update makefile gcc flags - Work around glibc regression for major/minor header - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Cleanup spec file conditionals - Rebuild for posix lock issue fix Related: RHEL-140243 - Rebuild for recover flag functionality Related: RHEL-136235 - update to 4.1.0 - dlm_controld: use new quorum api to detect missed failures - kick gating system - try to kick gating system - update to 4.0.9 - dlm_controld: ignore unwanted uevent strings - update makefile gcc flags - Work around glibc regression for major/minor header - AlmaLinux changes - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245) - Fix japanese translations (RHEL-6393) - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786) - Document symbols in `dnf history list` output (RhBug:2172067) - Return an error when transaction fails (RhBug:2170093) - Omit src RPMs from check-update (RhBug:2151910,2203069) - automatic: Fix online detection with proxy (RhBug:2022440,2189851) - Update translations - Ignore processing variable files with unsupported encoding (RhBug:2141215) - Better explain traceback of rpm.error with dnf - Document changes to offline-upgrade command (RhBug:1939975,2139324) - Add support for rollback of group upgrade rollback (RhBug:2016070) - Move system-upgrade plugin to core (RhBug:2054235) - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309) - Allow passing plugin parameters with dashes in names (RhBug:1980712) - Fix upgrade from file to noarch pkg (RhBug:2006018) - Add support for group upgrade rollback (RhBug:2016070) - Expose plugin unload method to API (RhBug:2047251) - Add doc related to --destdir and --downloadonly options (RhBug:2100811) - Set default value for variable to prevent crash (RhBug:2091636) - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421) - Added patch for almalinux bugtracker - automatic: catch OSError, not SMTPException on smtp errors (RHEL-71545) - automatic: Check availability of config file (RHEL-71545) - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245) - Fix japanese translations (RHEL-6393) - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786) - Document symbols in `dnf history list` output (RhBug:2172067) - Return an error when transaction fails (RhBug:2170093) - Omit src RPMs from check-update (RhBug:2151910,2203069) - automatic: Fix online detection with proxy (RhBug:2022440,2189851) - Update translations - Ignore processing variable files with unsupported encoding (RhBug:2141215) - Better explain traceback of rpm.error with dnf - Document changes to offline-upgrade command (RhBug:1939975,2139324) - Add support for rollback of group upgrade rollback (RhBug:2016070) - Move system-upgrade plugin to core (RhBug:2054235) - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309) - AlmaLinux changes - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245) - Fix japanese translations (RHEL-6393) - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786) - Document symbols in `dnf history list` output (RhBug:2172067) - Return an error when transaction fails (RhBug:2170093) - Omit src RPMs from check-update (RhBug:2151910,2203069) - automatic: Fix online detection with proxy (RhBug:2022440,2189851) - Update translations - Ignore processing variable files with unsupported encoding (RhBug:2141215) - Better explain traceback of rpm.error with dnf - Document changes to offline-upgrade command (RhBug:1939975,2139324) - Add support for rollback of group upgrade rollback (RhBug:2016070) - Move system-upgrade plugin to core (RhBug:2054235) - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309) - Allow passing plugin parameters with dashes in names (RhBug:1980712) - Fix upgrade from file to noarch pkg (RhBug:2006018) - Add support for group upgrade rollback (RhBug:2016070) - Expose plugin unload method to API (RhBug:2047251) - Add doc related to --destdir and --downloadonly options (RhBug:2100811) - Set default value for variable to prevent crash (RhBug:2091636) - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421) - Added patch for almalinux bugtracker - automatic: catch OSError, not SMTPException on smtp errors (RHEL-71545) - automatic: Check availability of config file (RHEL-71545) - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245) - Fix japanese translations (RHEL-6393) - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786) - Document symbols in `dnf history list` output (RhBug:2172067) - Return an error when transaction fails (RhBug:2170093) - Omit src RPMs from check-update (RhBug:2151910,2203069) - automatic: Fix online detection with proxy (RhBug:2022440,2189851) - Update translations - Ignore processing variable files with unsupported encoding (RhBug:2141215) - Better explain traceback of rpm.error with dnf - Document changes to offline-upgrade command (RhBug:1939975,2139324) - Add support for rollback of group upgrade rollback (RhBug:2016070) - Move system-upgrade plugin to core (RhBug:2054235) - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309) - AlmaLinux changes - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245) - Fix japanese translations (RHEL-6393) - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786) - Document symbols in `dnf history list` output (RhBug:2172067) - Return an error when transaction fails (RhBug:2170093) - Omit src RPMs from check-update (RhBug:2151910,2203069) - automatic: Fix online detection with proxy (RhBug:2022440,2189851) - Update translations - Ignore processing variable files with unsupported encoding (RhBug:2141215) - Better explain traceback of rpm.error with dnf - Document changes to offline-upgrade command (RhBug:1939975,2139324) - Add support for rollback of group upgrade rollback (RhBug:2016070) - Move system-upgrade plugin to core (RhBug:2054235) - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309) - Allow passing plugin parameters with dashes in names (RhBug:1980712) - Fix upgrade from file to noarch pkg (RhBug:2006018) - Add support for group upgrade rollback (RhBug:2016070) - Expose plugin unload method to API (RhBug:2047251) - Add doc related to --destdir and --downloadonly options (RhBug:2100811) - Set default value for variable to prevent crash (RhBug:2091636) - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421) - Added patch for almalinux bugtracker - automatic: catch OSError, not SMTPException on smtp errors (RHEL-71545) - automatic: Check availability of config file (RHEL-71545) - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245) - Fix japanese translations (RHEL-6393) - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786) - Document symbols in `dnf history list` output (RhBug:2172067) - Return an error when transaction fails (RhBug:2170093) - Omit src RPMs from check-update (RhBug:2151910,2203069) - automatic: Fix online detection with proxy (RhBug:2022440,2189851) - Update translations - Ignore processing variable files with unsupported encoding (RhBug:2141215) - Better explain traceback of rpm.error with dnf - Document changes to offline-upgrade command (RhBug:1939975,2139324) - Add support for rollback of group upgrade rollback (RhBug:2016070) - Move system-upgrade plugin to core (RhBug:2054235) - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309) - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - Translated using Weblate (Spanish) (ptoscano@redhat.com) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - Translated using Weblate (German) (atalanttore@googlemail.com) - New extraction for translatable strings (ptoscano@redhat.com) - Base DBusServerStubProvider on SubManFixture (mhorky@redhat.com) - Mark D-Bus tests (mhorky@redhat.com) - Remove unused classes of DBus tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Unregister (mhorky@redhat.com) - ENT-5350: Implement "force" register option in rhsm dbus python bindings (mhorky@redhat.com) - ENT-5533: Fix failures of D-Bus' Register tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Register (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Products (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of AllFacts (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Entitlement (mhorky@redhat.com) - Fix typo in method name of EntitlementService (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Consumer (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Attach (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Config (mhorky@redhat.com) - Skip AsyncPool tests (mhorky@redhat.com) - Catch generic OSError during BaseRestLib._request() (ptoscano@redhat.com) - Catch also CertificateLoadingError for identity cert loading (ptoscano@redhat.com) - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com) - Improve formatting of CertificateLoadingError (ptoscano@redhat.com) - Raise a new CertificateLoadingError on X.509 loading failures (ptoscano@redhat.com) - Improve formatting of UnknownContentException (ptoscano@redhat.com) - connection: improve the internal UnknownContentException (ptoscano@redhat.com) - utils: add terminal_printable_content (ptoscano@redhat.com) - connection: rename NetworkException to UnknownContentException (ptoscano@redhat.com) - Improve formatting of ProxyException (ptoscano@redhat.com) - connection: improve the internal ProxyException (ptoscano@redhat.com) - Improve formatting of socket.gaierror (ptoscano@redhat.com) - Improve formatting of ConnectionError (ptoscano@redhat.com) - Improve formatting of BadCertificateException (ptoscano@redhat.com) - connection: extend BadCertificateException w/ SSL exception (ptoscano@redhat.com) - connection: drop dead code (ptoscano@redhat.com) - ENT-4286: Additional fix for exception handling (jajerome@redhat.com) - ENT-4286: Simplify exception reporting with system_exit() (jajerome@redhat.com) - Cloud-what: Make saving token file more robust (jhnidek@redhat.com) - Remove deprecated function call (mhorky@redhat.com) - Fix failures of D-Bus' Register tests (mhorky@redhat.com) - Show locals in pytest output (mhorky@redhat.com) - tito: add rhel 8.8 releaser (ptoscano@redhat.com) - Translated using Weblate (Japanese) (suanand@redhat.com) - Translated using Weblate (French) (vincent.lefebvre59@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - ENT-5510: Fix issues with proxy and cockpit interaction (jajerome@redhat.com) - 2118486: [1.28] Implement "force" register option in rhsm dbus python binding (jajerome@redhat.com) - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Italian) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Spanish) (fserrador@gmail.com) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (French) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (German) (atalanttore@googlemail.com) - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - tests: fix mocking of get_terminal_width() in TestColumnize (ptoscano@redhat.com) - feat: print compliance errors & syspurpose status only in entitlement mode (ptoscano@redhat.com) - feat: print "registered" as status when using SCA (ptoscano@redhat.com) - feat: print "not registered" on status when not registered (ptoscano@redhat.com) - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com) - refactor: move determination of content access mode in own method (ptoscano@redhat.com) - tests: move StubIdentity to stubs (ptoscano@redhat.com) - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com) - chore: move banner printing to its own function (ptoscano@redhat.com) - ci: bump actions/upload-artifact from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - ci: bump actions/checkout from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - test: cockpit: switch to CERT auth for insights-client (ptoscano@redhat.com) - test: cockpit: mock-insights: implement upload and delete platform endpoints (ptoscano@redhat.com) - test: cockpit: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com) - test: cockpit: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com) - feat: cockpit: switch from .last-upload.results to .lastupload (ptoscano@redhat.com) - chore: cockpit: test: use the new syspurpose command (ptoscano@redhat.com) - test: cockpit: wait more when registering to Insights (ptoscano@redhat.com) - test: cockpit: break insights-client in a different way (ptoscano@redhat.com) - test: cockpit: mock-insights: return 404 for missing systems in /systems (ptoscano@redhat.com) - test: cockpit: wait longer in certain situations (ptoscano@redhat.com) - test: cockpit: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com) - chore(ci): Use Vault for CentOS Stream 8 (mhorky@redhat.com) - fix: Hide subscription management "errors" in container mode (mhorky@redhat.com) - feat: 1.28 Added more AWS cloud facts (jhnidek@redhat.com) - feat: 1.28 Added zone GCP fact (jhnidek@redhat.com) - feat: 1.28 Azure: added extended location and type of location fact (jhnidek@redhat.com) - fix: 1.28 Update version of Azure metadata (jhnidek@redhat.com) - feat: 1.28 Added Azure location to facts (jhnidek@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - Add microcode_ctl to a reboot list (RHEL-17356) - Fix for strange issue with binary garbage in smaps files (RHEL-6392, RhBug:2212953) - Add patch: Fix zlib reboot requirement (RhBug:2092033) - Add fix and test assertion for "no systemd unit exists for pid" - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2208444) - versionlock: Use only the most specific NEVRA (RhBug:1961217) - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157) - Doc update for reposync (RhBug:2132383,2182004) - reposync: Implement --safe-write-path option (RhBug:1898089,2203766) - Update translations - Show downstream warning during system-upgrade - offline-upgrade: add support for security filters (RhBug:1939975,2139324) - Move system-upgrade plugin to core (RhBug:2054235) - Move system-upgrade plugin to core (RhBug:2054235) - Fixed bz#1624104, annocheck distro flag failures in dos2unix - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 7.4.0. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - 7.3.5. - Removed build requirement perl-Pod-Checker - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 7.3.4. - 7.3.3 (bug #1308277). - Fixed mkfs.fat cluster size calculation for disks with 4k sectors Resolves: rhbz#1651496 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - New version Resolves: rhbz#1416392 - New version Resolves: rhbz#1333781 - Switched to autotools - Various spec file cosmetic fixes (e.g. used optflags) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - New version Resolves: rhbz#1263818 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - Dracut: only login to one target at a time - iscsi: don't continue waiting if the root device is present - network: stop waiting for interfaces if root device is - iscsiroot: parse_iscsi_root overwrites command line args - iscsiroot: there's never more than one target per call - iscsiroot: try targets only once - iscsiroot: remove bashisms - fixup "Dracut: only login to one target at a time" - 35network-legacy: only skip waiting for interfaces if netroot - fix(95iscsi): Fix network setup - fix(dracut-systemd): correct service dependencies - feat(lvm): add new module lvmthinpool-monitor - fix(dracut-shutdown): add cleanup handler on failure - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - Dracut: only login to one target at a time - iscsi: don't continue waiting if the root device is present - network: stop waiting for interfaces if root device is - iscsiroot: parse_iscsi_root overwrites command line args - iscsiroot: there's never more than one target per call - iscsiroot: try targets only once - iscsiroot: remove bashisms - fixup "Dracut: only login to one target at a time" - 35network-legacy: only skip waiting for interfaces if netroot - fix(95iscsi): Fix network setup - fix(dracut-systemd): correct service dependencies - feat(lvm): add new module lvmthinpool-monitor - fix(dracut-shutdown): add cleanup handler on failure - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - Dracut: only login to one target at a time - iscsi: don't continue waiting if the root device is present - network: stop waiting for interfaces if root device is - iscsiroot: parse_iscsi_root overwrites command line args - iscsiroot: there's never more than one target per call - iscsiroot: try targets only once - iscsiroot: remove bashisms - fixup "Dracut: only login to one target at a time" - 35network-legacy: only skip waiting for interfaces if netroot - fix(95iscsi): Fix network setup - fix(dracut-systemd): correct service dependencies - feat(lvm): add new module lvmthinpool-monitor - fix(dracut-shutdown): add cleanup handler on failure - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - Dracut: only login to one target at a time - iscsi: don't continue waiting if the root device is present - network: stop waiting for interfaces if root device is - iscsiroot: parse_iscsi_root overwrites command line args - iscsiroot: there's never more than one target per call - iscsiroot: try targets only once - iscsiroot: remove bashisms - fixup "Dracut: only login to one target at a time" - 35network-legacy: only skip waiting for interfaces if netroot - fix(95iscsi): Fix network setup - fix(dracut-systemd): correct service dependencies - feat(lvm): add new module lvmthinpool-monitor - fix(dracut-shutdown): add cleanup handler on failure - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - Dracut: only login to one target at a time - iscsi: don't continue waiting if the root device is present - network: stop waiting for interfaces if root device is - iscsiroot: parse_iscsi_root overwrites command line args - iscsiroot: there's never more than one target per call - iscsiroot: try targets only once - iscsiroot: remove bashisms - fixup "Dracut: only login to one target at a time" - 35network-legacy: only skip waiting for interfaces if netroot - fix(95iscsi): Fix network setup - fix(dracut-systemd): correct service dependencies - feat(lvm): add new module lvmthinpool-monitor - fix(dracut-shutdown): add cleanup handler on failure - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - Dracut: only login to one target at a time - iscsi: don't continue waiting if the root device is present - network: stop waiting for interfaces if root device is - iscsiroot: parse_iscsi_root overwrites command line args - iscsiroot: there's never more than one target per call - iscsiroot: try targets only once - iscsiroot: remove bashisms - fixup "Dracut: only login to one target at a time" - 35network-legacy: only skip waiting for interfaces if netroot - fix(95iscsi): Fix network setup - fix(dracut-systemd): correct service dependencies - feat(lvm): add new module lvmthinpool-monitor - fix(dracut-shutdown): add cleanup handler on failure - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - Dracut: only login to one target at a time - iscsi: don't continue waiting if the root device is present - network: stop waiting for interfaces if root device is - iscsiroot: parse_iscsi_root overwrites command line args - iscsiroot: there's never more than one target per call - iscsiroot: try targets only once - iscsiroot: remove bashisms - fixup "Dracut: only login to one target at a time" - 35network-legacy: only skip waiting for interfaces if netroot - fix(95iscsi): Fix network setup - fix(dracut-systemd): correct service dependencies - feat(lvm): add new module lvmthinpool-monitor - fix(dracut-shutdown): add cleanup handler on failure - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - Dracut: only login to one target at a time - iscsi: don't continue waiting if the root device is present - network: stop waiting for interfaces if root device is - iscsiroot: parse_iscsi_root overwrites command line args - iscsiroot: there's never more than one target per call - iscsiroot: try targets only once - iscsiroot: remove bashisms - fixup "Dracut: only login to one target at a time" - 35network-legacy: only skip waiting for interfaces if netroot - fix(95iscsi): Fix network setup - fix(dracut-systemd): correct service dependencies - feat(lvm): add new module lvmthinpool-monitor - fix(dracut-shutdown): add cleanup handler on failure - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(80lvmthinpool-monitor): use systemsctl instead of - fix(squash): build ld cache for squash loader - fix(network-manager): write DHCP filename option to dhcpopts - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(dracut-init): use ldconfig directly instead of - fix(dracut-init.sh): backport common paths - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - fix(img-lib): ignored null byte in input - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - fix(network-manager): escape DHCP lease values in dhcpopts - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script - fix(multipath): disable user_friendly_names with mpathconf - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - fix(rescue): create hmac file for rescue kernel - fix(spec): drop %config from 50-network-legacy.conf - spec: own 50-network-legacy.conf - fix(dracut.sh): remove microcode check based on - fix(qeth_rules): check the existence of - fix(iscsi): do not exit in handle_netroot() if discovery - feat(systemd): install systemd-sysroot-fstab-check - fix(fcoe-uefi): exit early on empty vlan - feat(qemu): include the virtio_mem kernel module - fix(rngd): install system service file - feat(hwdb): install hwdb on demand when module is needed - fix(kernel-network-modules): allow specifying empty hostonly-nics Resolves: #2148318 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Fix VERSION / version issue causing FTBFS on F27+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild for readline 7.x - New upstream release 0.4b46 (#1376411) - Fix issue with ignoring -Q flag (#1366133) - Fix issue with SIGSEGV alert (#1365124) - Restore higher Release so upgrade path works for pre-release - New upstream release 0.4b45 (#1361495) - Fix issue with bad UUID error message (#1048548) - Spec file has been updated - Build and package e2scrub package - remove e2fsprogs-1.45.6-Makefile.in-Disable-e2scrub.patch - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - libext2fs: fix unix_io's Direct I/O support - Related: RHEL-106939 - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Build and package e2scrub package - remove e2fsprogs-1.45.6-Makefile.in-Disable-e2scrub.patch - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - libext2fs: fix unix_io's Direct I/O support - Related: RHEL-106939 - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Build and package e2scrub package - remove e2fsprogs-1.45.6-Makefile.in-Disable-e2scrub.patch - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - libext2fs: fix unix_io's Direct I/O support - Related: RHEL-106939 - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - fix license tag - fix resource leaks - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 1.14.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Add missing %license macro - update to 1.14 - update to 1.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Disable debuginfod-urls - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Upgrade to upstream 0.186 - debuginfod-client: Default $DEBUGINFOD_URLS is computed from drop-in files /etc/debuginfod/*.urls rather than hardcoded into the /etc/profile.d/debuginfod* scripts. Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings for skipping large/slow transfers. Add $DEBUGINFOD_RETRY for retrying aborted lookups. - debuginfod: Supply extra HTTP response headers, describing archive/file names that satisfy the requested buildid content. Support -d :memory: option for in-memory databases. Protect against loops in federated server configurations. Add -r option to use -I/-X regexes for grooming stale files. Protect against wasted CPU from duplicate concurrent requests. Limit the duration of groom ops roughly to rescan (-t) times. Add --passive mode for serving from read-only database. Several other performance improvements & prometheus metrics. - libdw: Support for the NVIDIA Cuda line map extensions. DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name are defined in dwarf.h. New functions dwarf_linecontext and dwarf_linefunctionname. - translations: Update Japanese translation. - Disable debuginfod-urls - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Upgrade to upstream 0.186 - debuginfod-client: Default $DEBUGINFOD_URLS is computed from drop-in files /etc/debuginfod/*.urls rather than hardcoded into the /etc/profile.d/debuginfod* scripts. Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings for skipping large/slow transfers. Add $DEBUGINFOD_RETRY for retrying aborted lookups. - debuginfod: Supply extra HTTP response headers, describing archive/file names that satisfy the requested buildid content. Support -d :memory: option for in-memory databases. Protect against loops in federated server configurations. Add -r option to use -I/-X regexes for grooming stale files. Protect against wasted CPU from duplicate concurrent requests. Limit the duration of groom ops roughly to rescan (-t) times. Add --passive mode for serving from read-only database. Several other performance improvements & prometheus metrics. - libdw: Support for the NVIDIA Cuda line map extensions. DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name are defined in dwarf.h. New functions dwarf_linecontext and dwarf_linefunctionname. - translations: Update Japanese translation. - Disable debuginfod-urls - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Upgrade to upstream 0.186 - debuginfod-client: Default $DEBUGINFOD_URLS is computed from drop-in files /etc/debuginfod/*.urls rather than hardcoded into the /etc/profile.d/debuginfod* scripts. Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings for skipping large/slow transfers. Add $DEBUGINFOD_RETRY for retrying aborted lookups. - debuginfod: Supply extra HTTP response headers, describing archive/file names that satisfy the requested buildid content. Support -d :memory: option for in-memory databases. Protect against loops in federated server configurations. Add -r option to use -I/-X regexes for grooming stale files. Protect against wasted CPU from duplicate concurrent requests. Limit the duration of groom ops roughly to rescan (-t) times. Add --passive mode for serving from read-only database. Several other performance improvements & prometheus metrics. - libdw: Support for the NVIDIA Cuda line map extensions. DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name are defined in dwarf.h. New functions dwarf_linecontext and dwarf_linefunctionname. - translations: Update Japanese translation. - Disable debuginfod-urls - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Upgrade to upstream 0.186 - debuginfod-client: Default $DEBUGINFOD_URLS is computed from drop-in files /etc/debuginfod/*.urls rather than hardcoded into the /etc/profile.d/debuginfod* scripts. Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings for skipping large/slow transfers. Add $DEBUGINFOD_RETRY for retrying aborted lookups. - debuginfod: Supply extra HTTP response headers, describing archive/file names that satisfy the requested buildid content. Support -d :memory: option for in-memory databases. Protect against loops in federated server configurations. Add -r option to use -I/-X regexes for grooming stale files. Protect against wasted CPU from duplicate concurrent requests. Limit the duration of groom ops roughly to rescan (-t) times. Add --passive mode for serving from read-only database. Several other performance improvements & prometheus metrics. - libdw: Support for the NVIDIA Cuda line map extensions. DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name are defined in dwarf.h. New functions dwarf_linecontext and dwarf_linefunctionname. - translations: Update Japanese translation. - Disable debuginfod-urls - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Upgrade to upstream 0.186 - debuginfod-client: Default $DEBUGINFOD_URLS is computed from drop-in files /etc/debuginfod/*.urls rather than hardcoded into the /etc/profile.d/debuginfod* scripts. Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings for skipping large/slow transfers. Add $DEBUGINFOD_RETRY for retrying aborted lookups. - debuginfod: Supply extra HTTP response headers, describing archive/file names that satisfy the requested buildid content. Support -d :memory: option for in-memory databases. Protect against loops in federated server configurations. Add -r option to use -I/-X regexes for grooming stale files. Protect against wasted CPU from duplicate concurrent requests. Limit the duration of groom ops roughly to rescan (-t) times. Add --passive mode for serving from read-only database. Several other performance improvements & prometheus metrics. - libdw: Support for the NVIDIA Cuda line map extensions. DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name are defined in dwarf.h. New functions dwarf_linecontext and dwarf_linefunctionname. - translations: Update Japanese translation. - Disable debuginfod-urls - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Upgrade to upstream 0.186 - debuginfod-client: Default $DEBUGINFOD_URLS is computed from drop-in files /etc/debuginfod/*.urls rather than hardcoded into the /etc/profile.d/debuginfod* scripts. Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings for skipping large/slow transfers. Add $DEBUGINFOD_RETRY for retrying aborted lookups. - debuginfod: Supply extra HTTP response headers, describing archive/file names that satisfy the requested buildid content. Support -d :memory: option for in-memory databases. Protect against loops in federated server configurations. Add -r option to use -I/-X regexes for grooming stale files. Protect against wasted CPU from duplicate concurrent requests. Limit the duration of groom ops roughly to rescan (-t) times. Add --passive mode for serving from read-only database. Several other performance improvements & prometheus metrics. - libdw: Support for the NVIDIA Cuda line map extensions. DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name are defined in dwarf.h. New functions dwarf_linecontext and dwarf_linefunctionname. - translations: Update Japanese translation. - Disable debuginfod-urls - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Upgrade to upstream 0.186 - debuginfod-client: Default $DEBUGINFOD_URLS is computed from drop-in files /etc/debuginfod/*.urls rather than hardcoded into the /etc/profile.d/debuginfod* scripts. Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings for skipping large/slow transfers. Add $DEBUGINFOD_RETRY for retrying aborted lookups. - debuginfod: Supply extra HTTP response headers, describing archive/file names that satisfy the requested buildid content. Support -d :memory: option for in-memory databases. Protect against loops in federated server configurations. Add -r option to use -I/-X regexes for grooming stale files. Protect against wasted CPU from duplicate concurrent requests. Limit the duration of groom ops roughly to rescan (-t) times. Add --passive mode for serving from read-only database. Several other performance improvements & prometheus metrics. - libdw: Support for the NVIDIA Cuda line map extensions. DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name are defined in dwarf.h. New functions dwarf_linecontext and dwarf_linefunctionname. - translations: Update Japanese translation. - Disable debuginfod-urls - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Upgrade to upstream 0.186 - debuginfod-client: Default $DEBUGINFOD_URLS is computed from drop-in files /etc/debuginfod/*.urls rather than hardcoded into the /etc/profile.d/debuginfod* scripts. Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings for skipping large/slow transfers. Add $DEBUGINFOD_RETRY for retrying aborted lookups. - debuginfod: Supply extra HTTP response headers, describing archive/file names that satisfy the requested buildid content. Support -d :memory: option for in-memory databases. Protect against loops in federated server configurations. Add -r option to use -I/-X regexes for grooming stale files. Protect against wasted CPU from duplicate concurrent requests. Limit the duration of groom ops roughly to rescan (-t) times. Add --passive mode for serving from read-only database. Several other performance improvements & prometheus metrics. - libdw: Support for the NVIDIA Cuda line map extensions. DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name are defined in dwarf.h. New functions dwarf_linecontext and dwarf_linefunctionname. - translations: Update Japanese translation. - Disable debuginfod-urls - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Add elfutils-0.190-fix-core-noncontig.patch - Upgrade to upstream elfutils 0.190 - Add eu-srcfiles - Drop upstreamed patches elfutils-0.189-debuginfod_config_cache-double-close.patch elfutils-0.189-elf_getdata_rawchunk.patch elfutils-0.189-elfcompress.patch - Only package debuginfod-client-config.7 manpage for debuginfod-client - Add elfutils-0.189-elf_getdata_rawchunk.patch - Add elfutils-0.189-debuginfod_config_cache-double-close.patch - Add elfutils-0.189-elfcompress.patch - Upgrade to upsteam elfutils 0.189. - Add elfutils-0.188-compile-warnings.patch - Add elfutils-0.188-debuginfod-client-lifetime.patch - Upgrade to upsteam elfutils 0.188. - Add elfutils-0.188-static-extract_section.patch. - Upgrade to elfutils 0.187 - debuginfod: Support -C option for connection thread pooling. - debuginfod-client: Negative cache file are now zero sized instead of no-permission files. - addr2line: The -A, --absolute option, which shows file names includingthe full compilation directory is now the default. To get theold behavior use the new option --relative. - readelf, elflint: Recognize FDO Packaging Metadata ELF notes - libdw, debuginfo-client: Load libcurl lazily only when files need to be fetched remotely. libcurl is now never loaded when DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set, libcurl is only loaded when the debuginfod_begin function is called. - Add elfutils-0.187-csh-profile.patch - Add elfutils-0.187-debuginfod-client-fd-leak.patch - Add elfutils-0.187-mhd_no_dual_stack.patch - Add elfutils-0.187-mhd_epoll.patch - Add an explicit versioned requires from elfutils-debuginfod-client on elfutils-libs and elfutils-libelf. - Remove brew testsuite workarounds - rhbz2052574: enable debuginfod.centos.org support by default - Upgrade to upstream 0.186 - debuginfod-client: Default $DEBUGINFOD_URLS is computed from drop-in files /etc/debuginfod/*.urls rather than hardcoded into the /etc/profile.d/debuginfod* scripts. Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings for skipping large/slow transfers. Add $DEBUGINFOD_RETRY for retrying aborted lookups. - debuginfod: Supply extra HTTP response headers, describing archive/file names that satisfy the requested buildid content. Support -d :memory: option for in-memory databases. Protect against loops in federated server configurations. Add -r option to use -I/-X regexes for grooming stale files. Protect against wasted CPU from duplicate concurrent requests. Limit the duration of groom ops roughly to rescan (-t) times. Add --passive mode for serving from read-only database. Several other performance improvements & prometheus metrics. - libdw: Support for the NVIDIA Cuda line map extensions. DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name are defined in dwarf.h. New functions dwarf_linecontext and dwarf_linefunctionname. - translations: Update Japanese translation. - Bump version - Fix etags local command injection vulnerability (#2175189) - Fix htmlfontify.el command injection vulnerability (#2175178) - Fix ob-latex.el command injection vulnerability (#2180587) - Fix MH-E mail composition with GNU Mailutils (#1991156) - Fix ctags local command execute vulnerability (#2149386) - provide gating.yaml for CI - a new GPG key for GNU ELPA packages (#1810729) - review annocheck distro flag failures (#1624109) - remove ImageMagick dependency (#1564992) - remove python dependencies, emacs*.py have not been there for a while - remove build dependency on python2 (#1591707) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Disable xwidgets (RHEL-14549) - Bump version - Fix etags local command injection vulnerability (#2175189) - Fix htmlfontify.el command injection vulnerability (#2175178) - Fix ob-latex.el command injection vulnerability (#2180587) - Fix MH-E mail composition with GNU Mailutils (#1991156) - Fix ctags local command execute vulnerability (#2149386) - provide gating.yaml for CI - a new GPG key for GNU ELPA packages (#1810729) - review annocheck distro flag failures (#1624109) - remove ImageMagick dependency (#1564992) - remove python dependencies, emacs*.py have not been there for a while - Fix man.el shell injection vulnerability (RHEL-79016) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Disable xwidgets (RHEL-14549) - Bump version - Fix etags local command injection vulnerability (#2175189) - Fix htmlfontify.el command injection vulnerability (#2175178) - Fix ob-latex.el command injection vulnerability (#2180587) - Fix MH-E mail composition with GNU Mailutils (#1991156) - Fix ctags local command execute vulnerability (#2149386) - provide gating.yaml for CI - a new GPG key for GNU ELPA packages (#1810729) - review annocheck distro flag failures (#1624109) - remove ImageMagick dependency (#1564992) - Fix TRAMP user name shell injection vulnerability (CVE-2026-79992) - Resolves: RHEL-248545 - Fix integer overflow in PBM image loader (CVE-2026-77219) - Resolves: RHEL-248064 - Restore definition of variable "enable-dir-local-variables" (RHEL-92830) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69394) - Fix man.el shell injection vulnerability (RHEL-79016) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Disable xwidgets (RHEL-14549) - Bump version - Fix etags local command injection vulnerability (#2175189) - Fix htmlfontify.el command injection vulnerability (#2175178) - Fix ob-latex.el command injection vulnerability (#2180587) - Fix MH-E mail composition with GNU Mailutils (#1991156) - Fix ctags local command execute vulnerability (#2149386) - Restore definition of variable "enable-dir-local-variables" (RHEL-92830) - Fix arbitrary code execution via Lisp macro expansion (RHEL-69394) - Fix man.el shell injection vulnerability (RHEL-79016) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Disable xwidgets (RHEL-14549) - Bump version - Fix etags local command injection vulnerability (#2175189) - Fix htmlfontify.el command injection vulnerability (#2175178) - Fix ob-latex.el command injection vulnerability (#2180587) - Fix MH-E mail composition with GNU Mailutils (#1991156) - Fix ctags local command execute vulnerability (#2149386) - provide gating.yaml for CI - a new GPG key for GNU ELPA packages (#1810729) - Fix `module switch mod mod/vers` module loading (#2189252) - Fix profile.sh login shell misdetection (#1815047) - Evaluate both modulespath and initrc during initialization (#1894870) - Update to 4.5.2 (#1860674) - Update to 4.5.1 (#1642837) - Update to 4.5.0 (#1642837) - Gating rebuilt - Fix postun script (#1736487) - Update to 4.1.4 (#1619619) - Don't install any files under /usr as config files - Remove unnecessary build dependency on tclx (#1595105) - Fix command injection in bash Tab completion via compgen -W expansion (CVE-2026-85013) - Fix `module switch mod mod/vers` module loading (#2189252) - Fix profile.sh login shell misdetection (#1815047) - Evaluate both modulespath and initrc during initialization (#1894870) - Update to 4.5.2 (#1860674) - Update to 4.5.1 (#1642837) - Update to 4.5.0 (#1642837) - Gating rebuilt - Fix postun script (#1736487) - Update to 4.1.4 (#1619619) - Don't install any files under /usr as config files - Module (SFP/QSFP/CMIS) related bugfixes - Updated to upstream v5.13 - Added support for lanes - Added support for pause frame statistics - Fixed a regression - Added support for extended link state reporting - Fixed memory leak - Add post-5.8 bugfixes - Update to 5.8 (#1878826) - Added support for 200Gbps (50Gbps/lane) link mode - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 - Improve patch for CVE-2022-25236 - Related: CVE-2022-25236 - Fix patch for CVE-2022-25235 - Resolves: CVE-2022-25235 - Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 - Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 - add security fixes for CVE-2018-20843, CVE-2019-15903 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 - Improve patch for CVE-2022-25236 - Related: CVE-2022-25236 - Fix patch for CVE-2022-25235 - Resolves: CVE-2022-25235 - Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 - Improve patch for CVE-2022-25236 - Related: CVE-2022-25236 - Fix patch for CVE-2022-25235 - Resolves: CVE-2022-25235 - Fix CVE-2024-8176 - Resolves: RHEL-57477 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 - Improve patch for CVE-2022-25236 - Related: CVE-2022-25236 - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618 - Fix CVE-2024-8176 - Resolves: RHEL-57477 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221012 - Fix CVE-2026-50219 - Resolves: RHEL-220979 - Fix CVE-2026-45186 - Resolves: RHEL-177979 - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618 - Fix CVE-2024-8176 - Resolves: RHEL-57477 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - Fix CVE-2026-45186 - Resolves: RHEL-177979 - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618 - Fix CVE-2024-8176 - Resolves: RHEL-57477 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix CVE-2026-66046 in expat - Resolves: RHEL-260142 - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input - Resolves: RHEL-268995 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221012 - Fix CVE-2026-50219 - Resolves: RHEL-220979 - Fix CVE-2026-45186 - Resolves: RHEL-177979 - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618 - Fix CVE-2024-8176 - Resolves: RHEL-57477 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 - Improve patch for CVE-2022-25236 - Related: CVE-2022-25236 - Fix patch for CVE-2022-25235 - Resolves: CVE-2022-25235 - Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 - Fix multiple CVEs - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c - CVE-2022-22825 Integer overflow in lookup in xmlparse.c - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c - CVE-2022-22823 Integer overflow in build_model in xmlparse.c - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c - Resolves: CVE-2022-23852 - Resolves: CVE-2021-45960 - Resolves: CVE-2021-46143 - Resolves: CVE-2022-22827 - Resolves: CVE-2022-22826 - Resolves: CVE-2022-22825 - Resolves: CVE-2022-22824 - Resolves: CVE-2022-22823 - Resolves: CVE-2022-22822 - add security fixes for CVE-2018-20843, CVE-2019-15903 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 - Improve patch for CVE-2022-25236 - Related: CVE-2022-25236 - Fix patch for CVE-2022-25235 - Resolves: CVE-2022-25235 - Fix multiple CVEs - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution - CVE-2022-25315 expat: integer overflow in storeRawNames() - Resolves: CVE-2022-25236 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25315 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 - Improve patch for CVE-2022-25236 - Related: CVE-2022-25236 - Fix patch for CVE-2022-25235 - Resolves: CVE-2022-25235 - Fix CVE-2024-8176 - Resolves: RHEL-57477 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 - Improve patch for CVE-2022-25236 - Related: CVE-2022-25236 - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618 - Fix CVE-2024-8176 - Resolves: RHEL-57477 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix multiple CVEs - Resolves: CVE-2022-25314 - Resolves: CVE-2022-25313 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221012 - Fix CVE-2026-50219 - Resolves: RHEL-220979 - Fix CVE-2026-45186 - Resolves: RHEL-177979 - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618 - Fix CVE-2024-8176 - Resolves: RHEL-57477 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - Fix CVE-2026-45186 - Resolves: RHEL-177979 - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618 - Fix CVE-2024-8176 - Resolves: RHEL-57477 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix wrongly exposed variables - Resolves: RHEL-29321 - CVE-2023-52425 expat: parsing large tokens can trigger a denial of service - Resolves: RHEL-29321 - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 - Ensure raw tagnames are safe exiting internalEntityParser - Resolves: CVE-2022-40674 - Fix CVE-2026-66046 in expat - Resolves: RHEL-260142 - CVE-2026-93990 expat: Expat: XML Injection via Malformed UTF-16 Input - Resolves: RHEL-268995 - Fix CVE-2026-56132: out-of-bound scaffolding index store in doProlog - Resolves: RHEL-221012 - Fix CVE-2026-50219 - Resolves: RHEL-220979 - Fix CVE-2026-45186 - Resolves: RHEL-177979 - Rebase to version 2.5.0 - Fix CVE-2025-59375 - Resolves: RHEL-114618 - Fix CVE-2024-8176 - Resolves: RHEL-57477 - Fix CVE-2024-50602 - Resolves: RHEL-65062 - Rebuild for test reconfiguration - Fix multiple CVEs - Fix CVE-2024-45492 integer overflow - Fix CVE-2024-45491 Integer Overflow or Wraparound - Fix CVE-2024-45490 Negative Length Parsing Vulnerability - Resolves: RHEL-57505 - Resolves: RHEL-57493 - Resolves: RHEL-56751 - Fix issues detected by static analysis Resolves: #1602490 - Unificate and improve both man page and usage message of expect Resolves: #1612588 - Fix wrong log file permissions - Fix upstream URL - New upstream release 5.45.4 Resolves: #1541735 - New upstream release 5.45.3 Resolves: #1503372 - Removed 'Group' tag from spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - remove unnecessary tk-devel and libXft-devel build dependencies - tknewsbiff man page should be only in expectk - removed its duplicate from expect package - rebuilt for 8.5 - 1918561 regression in fipvlan VLAN name generation and fcoeadm commands - 1897503 revert breaking upstream change to command line options - 1889536 add back default change of DCB_REQUIRED="no" for RHEL 8 - 1889536 new version - 1776492 fcoemon: fix ignored devices from recv buffer resize bug - remove fcoe from SUPPORTED_DRIVERS in /etc/sysconfig/fcoe - add qedf to SUPPORTED_DRIVERS in /etc/sysconf/fcoe - added upstream fix for large fcoe ctrl numbers - fix some newer gcc 8 truncation format errors - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Fix segfault in python3-file-magic concurrent method calls (#13737) - Improve thermocam magic (rhbz#2158115) - fix detection of static-pie binaries (#2071581) - fix detection of static-pie binaries (#2071581) - fix issue with libmagic and floating point exceptions (#2061557) - fix recognition (src/compress.c) of compressed empty files (#2095828) - rebuild (#1954434) - fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218) - improve magic for script recognition and other changes (#1903531) - magic/Magdir/msooxml: Search deeper in the zip file (#1845169) - Fix incorrect magic pattern for databases Resolves: RHEL-84532 - Fix segfault in python3-file-magic concurrent method calls (#13737) - Improve thermocam magic (rhbz#2158115) - fix detection of static-pie binaries (#2071581) - fix detection of static-pie binaries (#2071581) - fix issue with libmagic and floating point exceptions (#2061557) - fix recognition (src/compress.c) of compressed empty files (#2095828) - rebuild (#1954434) - fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218) - improve magic for script recognition and other changes (#1903531) - Fix segfault in python3-file-magic concurrent method calls (#13737) - Improve thermocam magic (rhbz#2158115) - fix detection of static-pie binaries (#2071581) - fix detection of static-pie binaries (#2071581) - fix issue with libmagic and floating point exceptions (#2061557) - fix recognition (src/compress.c) of compressed empty files (#2095828) - rebuild (#1954434) - fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218) - improve magic for script recognition and other changes (#1903531) - magic/Magdir/msooxml: Search deeper in the zip file (#1845169) - Fix incorrect magic pattern for databases Resolves: RHEL-84532 - Fix segfault in python3-file-magic concurrent method calls (#13737) - Improve thermocam magic (rhbz#2158115) - fix detection of static-pie binaries (#2071581) - fix detection of static-pie binaries (#2071581) - fix issue with libmagic and floating point exceptions (#2061557) - fix recognition (src/compress.c) of compressed empty files (#2095828) - rebuild (#1954434) - fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218) - improve magic for script recognition and other changes (#1903531) - Make /proc and /sys ghost to workaround issue in container - Revert restorecon change - Do not restore content of /proc (#1827087) - Add BPF directories (#1788999) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - drop the ownership of ghostscript dirs (#1533992) - own /usr/share/locale and /usr/lib/modules - own /usr/lib/sysimage - improve filesystem content file to include symlinks and rootdir - own /usr/share/bash-completion{,/completions,/helpers} (#1504616) - create and own /usr/lib/debug/.dwz dir to prevent dangling symlink (#1508610) - improve the content file creation - create and own file with the content of filesystem package - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - improve description of printf options in find manpage (#1882695) - fix find not obeying option -ignore_readdir_race in symlink_loop (#2232278) - fix programming mistakes detected by static analysis (#1606953) - fix crash caused by mistakenly enabled leaf optimization (#1558249) - fix build failure with glibc-2.28 - add explicit BR for the gcc compiler - import gnulib's FTS module from upstream commit 281b825e (#1544429) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix autofs patch when stat was not performed (RHEL-45720) - improve description of printf options in find manpage (#1882695) - fix find not obeying option -ignore_readdir_race in symlink_loop (#2232278) - fix programming mistakes detected by static analysis (#1606953) - fix crash caused by mistakenly enabled leaf optimization (#1558249) - fix build failure with glibc-2.28 - add explicit BR for the gcc compiler - import gnulib's FTS module from upstream commit 281b825e (#1544429) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - simplify leaf optimization for XFS (RHEL-109249) - fix autofs patch when stat was not performed (RHEL-45720) - improve description of printf options in find manpage (#1882695) - fix find not obeying option -ignore_readdir_race in symlink_loop (#2232278) - fix programming mistakes detected by static analysis (#1606953) - fix crash caused by mistakenly enabled leaf optimization (#1558249) - fix build failure with glibc-2.28 - add explicit BR for the gcc compiler - import gnulib's FTS module from upstream commit 281b825e (#1544429) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - handle empty hmac file as checksum mismatch - fix inverted condition in FIPSCHECK_verify_ex() - added new API calls to support setting hmac suffix - manual pages added by Paul Wouters - look up the hmac files in the _libdir/fipscheck first - add lib subpackage to avoid multilib on the base package - add ability to compute hmacs on multiple files at once - improved debugging with FIPSCHECK_DEBUG - move binaries and libraries to /usr - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - handle empty hmac file as checksum mismatch - fix inverted condition in FIPSCHECK_verify_ex() - added new API calls to support setting hmac suffix - manual pages added by Paul Wouters - look up the hmac files in the _libdir/fipscheck first - add lib subpackage to avoid multilib on the base package - add ability to compute hmacs on multiple files at once - improved debugging with FIPSCHECK_DEBUG - move binaries and libraries to /usr - fix(service): update highest port number for ceph - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - fix(nftables): batch ipset elements to avoid O(n^2) insertion cost - Resolves: almalinux/almalinux-deploy#186 - fix(policy): allow-host-ipv6: allow MLD packets - fix(service): update highest port number for ceph - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(nftables): batch ipset elements to avoid O(n^2) insertion cost - Resolves: almalinux/almalinux-deploy#186 - bump NVR - fix(policy): allow-host-ipv6: allow MLD packets - fix(service): update highest port number for ceph - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - change default CleanupModulesOnExit=yes - feat(config): add CleanupModulesOnExit configuration option - change default CleanupModulesOnExit=yes - fix(zone): detect same source/interface in zones - fix(nftables): rich: source address with netmask - fix(nftables): do not log icmp block if inversion - docs(firewall-*cmd): client conntrack helpers must use a policy - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - change default CleanupModulesOnExit=yes - feat(config): add CleanupModulesOnExit configuration option - change default CleanupModulesOnExit=yes - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - change default CleanupModulesOnExit=yes - fix(service): update highest port number for ceph - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - fix(nftables): batch ipset elements to avoid O(n^2) insertion cost - Resolves: almalinux/almalinux-deploy#186 - fix(policy): allow-host-ipv6: allow MLD packets - fix(service): update highest port number for ceph - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(nftables): batch ipset elements to avoid O(n^2) insertion cost - Resolves: almalinux/almalinux-deploy#186 - bump NVR - fix(policy): allow-host-ipv6: allow MLD packets - fix(service): update highest port number for ceph - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - change default CleanupModulesOnExit=yes - feat(config): add CleanupModulesOnExit configuration option - change default CleanupModulesOnExit=yes - fix(zone): detect same source/interface in zones - fix(nftables): rich: source address with netmask - fix(nftables): do not log icmp block if inversion - docs(firewall-*cmd): client conntrack helpers must use a policy - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - change default CleanupModulesOnExit=yes - feat(config): add CleanupModulesOnExit configuration option - change default CleanupModulesOnExit=yes - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - change default CleanupModulesOnExit=yes - Return the error code when fc-validate detects missing glyphs. Resolves: rhbz#1972037 - Stop cleaning up .uuid file even when a directory is empty. resolves: rhbz#1653171 - Use Rachana instead of Meera for serif subsitution. resolves: rhbz#1650491 - Remove 25-no-bitmap-fedora.conf. (#1627023) - New upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Use ldconfig rpm macro. - Add Suggests: dejavu-sans-fonts to address pulling the unpredicted font package as dependency. (#1321551) - Update the version deps of freetype to resolve FT_Done_MM_Var symbol. (#1579464) - Fix the emboldening logic. (#1575649) - Another fix to accept the const names in param. - Fix locale issue. - Return the error code when fc-validate detects missing glyphs. Resolves: rhbz#1972037 - Stop cleaning up .uuid file even when a directory is empty. resolves: rhbz#1653171 - Use Rachana instead of Meera for serif subsitution. resolves: rhbz#1650491 - Remove 25-no-bitmap-fedora.conf. (#1627023) - New upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Use ldconfig rpm macro. - Add Suggests: dejavu-sans-fonts to address pulling the unpredicted font package as dependency. (#1321551) - Update the version deps of freetype to resolve FT_Done_MM_Var symbol. (#1579464) - Fix the emboldening logic. (#1575649) - Another fix to accept the const names in param. - Fix locale issue. - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Port yum to dnf patch by Michael Mráka (rh#1156554) - Drop fc-cache from %post/un in rpm macro. - fix conditional - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Drop yum-utils conditionals as we don't need it anymore - use %autosetup - Drop Group: tag - Update the Source URL - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release 1.5.7 (#1482285) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Update to 1.6.17, fixes CVE-2026-33554 - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release 1.5.7 (#1482285) - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release 1.5.7 (#1482285) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Update to 1.6.17, fixes CVE-2026-33554 - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release 1.5.7 (#1482285) - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release 1.5.7 (#1482285) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Update to 1.6.17, fixes CVE-2026-33554 - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release 1.5.7 (#1482285) - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release 1.5.7 (#1482285) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Update to 1.6.17, fixes CVE-2026-33554 - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release 1.5.7 (#1482285) - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Apply upstream patch 41d0d70f ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type - Update to 1.6.14 Fixes segfault when exceeding 1024 file descriptors - New upstream release 1.6.8 (#1923042) - New upstream release 1.6.6 (#1861627) - New upstream release 1.6.1 (#1541578) - Fix gcc dependency - Spec clean up (remove Group tag, add new macros and gcc dependency) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Fix CVE-2025-27363 Out-of-bounds Write - Resolves: RHEL-83094 - Guard face->size - Resolves: #2079279 - Properly guard "face_index" - Resolves: #2079261 - Do not search for windres - Resolves: #2079270 - Avoid invalid face index - Resolves: #2079270 - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891906 - Use pkgconf in freetype-config.in directly (RPMDiff) - Related: #1651252 - Enable ClearType subpixel rendering - Resolves: #1651252 - Fix important issues found by covscan - Resolves: #1602501 - Update to 2.9.1 - Modify/remove/add patches as needed - Resolves: #1595787 - Fix CVE-2025-27363 - patch by Marc Deslauriers of Canonical - Guard face->size - Resolves: #2079279 - Properly guard "face_index" - Resolves: #2079261 - Do not search for windres - Resolves: #2079270 - Avoid invalid face index - Resolves: #2079270 - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891906 - Use pkgconf in freetype-config.in directly (RPMDiff) - Related: #1651252 - Enable ClearType subpixel rendering - Resolves: #1651252 - Fix important issues found by covscan - Resolves: #1602501 - Update to 2.9.1 - Modify/remove/add patches as needed - Resolves: #1595787 - Guard face->size - Resolves: #2079279 - Properly guard "face_index" - Resolves: #2079261 - Do not search for windres - Resolves: #2079270 - Avoid invalid face index - Resolves: #2079270 - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891906 - Use pkgconf in freetype-config.in directly (RPMDiff) - Related: #1651252 - Enable ClearType subpixel rendering - Resolves: #1651252 - Fix important issues found by covscan - Resolves: #1602501 - Update to 2.9.1 - Modify/remove/add patches as needed - Resolves: #1595787 - Avoid NULL reference - Resolves: #1544776 - Fix CVE-2025-27363 Out-of-bounds Write - Resolves: RHEL-83094 - Guard face->size - Resolves: #2079279 - Properly guard "face_index" - Resolves: #2079261 - Do not search for windres - Resolves: #2079270 - Avoid invalid face index - Resolves: #2079270 - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891906 - Use pkgconf in freetype-config.in directly (RPMDiff) - Related: #1651252 - Enable ClearType subpixel rendering - Resolves: #1651252 - Fix important issues found by covscan - Resolves: #1602501 - Update to 2.9.1 - Modify/remove/add patches as needed - Resolves: #1595787 - Fix CVE-2025-27363 - patch by Marc Deslauriers of Canonical - Guard face->size - Resolves: #2079279 - Properly guard "face_index" - Resolves: #2079261 - Do not search for windres - Resolves: #2079270 - Avoid invalid face index - Resolves: #2079270 - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891906 - Use pkgconf in freetype-config.in directly (RPMDiff) - Related: #1651252 - Enable ClearType subpixel rendering - Resolves: #1651252 - Fix important issues found by covscan - Resolves: #1602501 - Update to 2.9.1 - Modify/remove/add patches as needed - Resolves: #1595787 - Guard face->size - Resolves: #2079279 - Properly guard "face_index" - Resolves: #2079261 - Do not search for windres - Resolves: #2079270 - Avoid invalid face index - Resolves: #2079270 - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: #1891906 - Use pkgconf in freetype-config.in directly (RPMDiff) - Related: #1651252 - Enable ClearType subpixel rendering - Resolves: #1651252 - Fix important issues found by covscan - Resolves: #1602501 - Update to 2.9.1 - Modify/remove/add patches as needed - Resolves: #1595787 - Avoid NULL reference - Resolves: #1544776 - Synchronize expire-only API with upstream. - Related: RHEL-23415 - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Fixes RHEL-19149 - Add feature_notify_inode_expire_only - Fixes rhbz#2171095 - Back-port max_pages support, - caching symlinks in kernel page cache, - and in-kernel readdir caching - Fixed rhbz#2080000 - Fix missing dependency of fuse3 on fuse3-libs - Make symlink for mount.fuse to mount.fuse3 - Fix failing test for fuse-3 - update to 3.3.0 - patch #5 is part of fuse-3 upstream now - Fixed CVE-2018-10906 (rhbz#1607855) - Fix regression from RHEL7 (rhbz#1648280) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update fuse3 to 3.2.1 - Synchronize expire-only API with upstream. - Related: RHEL-23415 - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Fixes RHEL-19149 - Add feature_notify_inode_expire_only - Fixes rhbz#2171095 - Back-port max_pages support, - caching symlinks in kernel page cache, - and in-kernel readdir caching - Fixed rhbz#2080000 - Fix missing dependency of fuse3 on fuse3-libs - Make symlink for mount.fuse to mount.fuse3 - Fix failing test for fuse-3 - update to 3.3.0 - patch #5 is part of fuse-3 upstream now - Fixed CVE-2018-10906 (rhbz#1607855) - Fix regression from RHEL7 (rhbz#1648280) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update fuse3 to 3.2.1 - Synchronize expire-only API with upstream. - Related: RHEL-23415 - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Fixes RHEL-19149 - Add feature_notify_inode_expire_only - Fixes rhbz#2171095 - Back-port max_pages support, - caching symlinks in kernel page cache, - and in-kernel readdir caching - Fixed rhbz#2080000 - Fix missing dependency of fuse3 on fuse3-libs - Make symlink for mount.fuse to mount.fuse3 - Fix failing test for fuse-3 - update to 3.3.0 - patch #5 is part of fuse-3 upstream now - Fixed CVE-2018-10906 (rhbz#1607855) - Fix regression from RHEL7 (rhbz#1648280) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update fuse3 to 3.2.1 - Synchronize expire-only API with upstream. - Related: RHEL-23415 - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Fixes RHEL-19149 - Add feature_notify_inode_expire_only - Fixes rhbz#2171095 - Back-port max_pages support, - caching symlinks in kernel page cache, - and in-kernel readdir caching - Fixed rhbz#2080000 - Fix missing dependency of fuse3 on fuse3-libs - Make symlink for mount.fuse to mount.fuse3 - Fix failing test for fuse-3 - update to 3.3.0 - patch #5 is part of fuse-3 upstream now - Fixed CVE-2018-10906 (rhbz#1607855) - Fix regression from RHEL7 (rhbz#1648280) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update fuse3 to 3.2.1 - Synchronize expire-only API with upstream. - Related: RHEL-23415 - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Fixes RHEL-19149 - Add feature_notify_inode_expire_only - Fixes rhbz#2171095 - Back-port max_pages support, - caching symlinks in kernel page cache, - and in-kernel readdir caching - Fixed rhbz#2080000 - Fix missing dependency of fuse3 on fuse3-libs - Make symlink for mount.fuse to mount.fuse3 - Fix failing test for fuse-3 - update to 3.3.0 - patch #5 is part of fuse-3 upstream now - Fixed CVE-2018-10906 (rhbz#1607855) - Fix regression from RHEL7 (rhbz#1648280) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update fuse3 to 3.2.1 - Synchronize expire-only API with upstream. - Related: RHEL-23415 - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Fixes RHEL-19149 - Add feature_notify_inode_expire_only - Fixes rhbz#2171095 - Back-port max_pages support, - caching symlinks in kernel page cache, - and in-kernel readdir caching - Fixed rhbz#2080000 - Fix missing dependency of fuse3 on fuse3-libs - Make symlink for mount.fuse to mount.fuse3 - Fix failing test for fuse-3 - update to 3.3.0 - patch #5 is part of fuse-3 upstream now - Fixed CVE-2018-10906 (rhbz#1607855) - Fix regression from RHEL7 (rhbz#1648280) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update fuse3 to 3.2.1 - Synchronize expire-only API with upstream. - Related: RHEL-23415 - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Fixes RHEL-19149 - Add feature_notify_inode_expire_only - Fixes rhbz#2171095 - Back-port max_pages support, - caching symlinks in kernel page cache, - and in-kernel readdir caching - Fixed rhbz#2080000 - Fix missing dependency of fuse3 on fuse3-libs - Make symlink for mount.fuse to mount.fuse3 - Fix failing test for fuse-3 - update to 3.3.0 - patch #5 is part of fuse-3 upstream now - Fixed CVE-2018-10906 (rhbz#1607855) - Fix regression from RHEL7 (rhbz#1648280) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update fuse3 to 3.2.1 - Use AlmaLinux cert - Backport the Redfish security fixes which affect IDRAC. - Resolves: rhbz#2170950 - New upstream release - Resolves: rhbz#2095668 - Include support for Lenovo TBT4 Docking stations - Do not cause systemd-modules-load failures - Resolves: rhbz#2038258 - Resolves: rhbz#2037294 - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c which lives in AppStream, not BaseOS. - Resolves: rhbz#2029333 - New upstream release - Backport upstream changes - Include support for Dell TBT4 Docking stations - Resolves: rhbz#1969472 - Resolves: rhbz#1976408 - Rebase to include the SBAT metadata section to allow fixing BootHole - Resolves: rhbz#1933012 - Resolves: rhbz#1932953 - Resolves: rhbz#1932909 - Resolves: rhbz#1932882 - Resolves: rhbz#1932579 - Resolves: rhbz#1932553 - Resolves: rhbz#1932423 - Backport a fix from upstream to fix a crash in the Goodix MOC plugin. - Resolves: #1927091 - Do not invalidate all remote timestamps during package install to fix rpm -V. - Backport some important high priority fixes from upstream. - Resolves: #1926382 - Rebase package to include support for latest OEM hardware and to support deploying UEFI SecureBoot dbx updates. - Resolves: #1870811 - AlmaLinux changes - Rebase to a new version. - Resolves: RHEL-185615 - Backport the Redfish security fixes which affect IDRAC. - Resolves: rhbz#2170950 - New upstream release - Resolves: rhbz#2095668 - Include support for Lenovo TBT4 Docking stations - Do not cause systemd-modules-load failures - Resolves: rhbz#2038258 - Resolves: rhbz#2037294 - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c which lives in AppStream, not BaseOS. - Resolves: rhbz#2029333 - New upstream release - Backport upstream changes - Include support for Dell TBT4 Docking stations - Resolves: rhbz#1969472 - Resolves: rhbz#1976408 - Rebase to include the SBAT metadata section to allow fixing BootHole - Resolves: rhbz#1933012 - Resolves: rhbz#1932953 - Resolves: rhbz#1932909 - Resolves: rhbz#1932882 - Resolves: rhbz#1932579 - Resolves: rhbz#1932553 - Resolves: rhbz#1932423 - Backport a fix from upstream to fix a crash in the Goodix MOC plugin. - Resolves: #1927091 - Do not invalidate all remote timestamps during package install to fix rpm -V. - Backport some important high priority fixes from upstream. - Resolves: #1926382 - Patch to apply CFLAGS/LDFLAGS to final link so RPM_OPT_FLAGS are picked up (rhbz#1548426) - Use CC=gcc explicitly - Regenerate fxload-noa3load.patch - add BR gcc - remove Group:, BuildRoot: and rm -rf in install section - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - update to 2008_10_13 to support Cypress EZ-USB FX2LP parts (rhbz#1102654) - Rebuild with some gating tests disabled Resolves: rhbz#2053515 Fix the issue with an incorect handling of return code of some processes Resolves: rhbz#2018077 - Fix an issue with an int() value not being assigned to a variable Resolves: #1893370 - Rebase to latest stable release from upstream - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 'noarch' removed from *-devel subpackage - added arch requirement for *-devel subpackage - updated the build process to use %make_build macro - Update to latest stable release from upstream [new API version - 2.0] - Added latest relevant patches from upstream's gawk-4.2-stable branch - Revert previous change of adding 'awk*' symlinks for info pages (bug #1486924) - Added patch to correctly fix the info pages issue (bug #1486924) - specfile content refactored for better readability - Package now provides its ABI version via gawk(abi) - Added test for usage of correct gawk(abi) into %check section - Added 'awk*' symlinks for info pages (bug #1486924) - Fix use-after-free in do_getline_redir() (CVE-2026-40467) Resolves: RHEL-222601 - Fix integer overflow in do_sub() and parse_escape() (CVE-2026-40468) Resolves: RHEL-222771 - Rebuild with some gating tests disabled Resolves: rhbz#2053515 Fix the issue with an incorect handling of return code of some processes Resolves: rhbz#2018077 - Fix an issue with an int() value not being assigned to a variable Resolves: #1893370 - Rebase to latest stable release from upstream - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 'noarch' removed from *-devel subpackage - added arch requirement for *-devel subpackage - updated the build process to use %make_build macro - Update to latest stable release from upstream [new API version - 2.0] - Added latest relevant patches from upstream's gawk-4.2-stable branch - Add backward compatibility patch - Resolves: #2097704 - Backport from upstream commit: 00ba17479ff31c6825f0e6f28b965f11525e83f6 - Rebase to latest release 1.18 - Fix issues found by coverity Resolves: RHBZ#1606956 - Rebase to upstream release 1.17 - Rebase to latest release 1.16 - Rebase to latest upstream relase 1.15 - Split libraries out to separate libs subpackage - Minor spec cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebase to latest upstream release (soname bump for ABI breakage in 1.14) - Fix -devel require to include also epoch - Add backward compatibility patch - Resolves: #2097704 - Backport from upstream commit: 00ba17479ff31c6825f0e6f28b965f11525e83f6 - Rebase to latest release 1.18 - Fix issues found by coverity Resolves: RHBZ#1606956 - Rebase to upstream release 1.17 - Rebase to latest release 1.16 - Rebase to latest upstream relase 1.15 - Split libraries out to separate libs subpackage - Minor spec cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebase to latest upstream release (soname bump for ABI breakage in 1.14) - Fix -devel require to include also epoch - Add backward compatibility patch - Resolves: #2097704 - Backport from upstream commit: 00ba17479ff31c6825f0e6f28b965f11525e83f6 - Rebase to latest release 1.18 - Fix issues found by coverity Resolves: RHBZ#1606956 - Rebase to upstream release 1.17 - Rebase to latest release 1.16 - Rebase to latest upstream relase 1.15 - Split libraries out to separate libs subpackage - Minor spec cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebase to latest upstream release (soname bump for ABI breakage in 1.14) - Fix -devel require to include also epoch - Fix double byteswap on big-endian systems also while reading partition names resolves: #2065205 - Fix CVE-2021-0308 resolves: #2052364 - Fix CVE-2020-0256 resolves: #2052365 - Add upstream tests as a gating test related: #1899990 - Fix incorrect byte order of partition names on big-endian systems resolves: #1899990 - Use LDFLAGS from redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuild with binutils fix for ppc64le (#1475636) - Ship NEWS - Backport fixes for CVE-2022-48622 - Apply patches with git to enable binary patching - Resolves: RHEL-30478 - Disable mmx support Resolves: #1630565 - Install missing test image Related: #1625683 - Fix up tests.yml - rebuild - Rebuild for CET note fixes Resolves: #1657310 - Update to 2.36.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 2.36.11 - Update to 2.36.10 - Update to 2.36.9 - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102346 - Backport fixes for CVE-2022-48622 - Apply patches with git to enable binary patching - Resolves: RHEL-30478 - Disable mmx support Resolves: #1630565 - Install missing test image Related: #1625683 - Fix up tests.yml - rebuild - Rebuild for CET note fixes Resolves: #1657310 - Update to 2.36.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 2.36.11 - Update to 2.36.10 - Backport fixes for CVE-2026-5201 - Related: RHEL-163056 - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102346 - Backport fixes for CVE-2022-48622 - Apply patches with git to enable binary patching - Resolves: RHEL-30478 - Disable mmx support Resolves: #1630565 - Install missing test image Related: #1625683 - Fix up tests.yml - rebuild - Rebuild for CET note fixes Resolves: #1657310 - Update to 2.36.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 2.36.11 - add explicit package version requirement - fix multilib regression in man pages - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - use the Fedora linker flags - Build with linker flags from redhat-rpm-config - update to 4.0.20 (#1533296) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - backport upstream to fix compilation on 32-bits arch - update to 4.0.18 prerelease - fix build with RPM_OPT_FLAGS - add explicit package version requirement - fix multilib regression in man pages - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - use the Fedora linker flags - Build with linker flags from redhat-rpm-config - update to 4.0.20 (#1533296) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - backport upstream to fix compilation on 32-bits arch - update to 4.0.18 prerelease - fix build with RPM_OPT_FLAGS - add explicit package version requirement - fix multilib regression in man pages - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - use the Fedora linker flags - Build with linker flags from redhat-rpm-config - update to 4.0.20 (#1533296) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - backport upstream to fix compilation on 32-bits arch - update to 4.0.18 prerelease - fix build with RPM_OPT_FLAGS - add explicit package version requirement - fix multilib regression in man pages - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - use the Fedora linker flags - Build with linker flags from redhat-rpm-config - update to 4.0.20 (#1533296) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - backport upstream to fix compilation on 32-bits arch - update to 4.0.18 prerelease - fix build with RPM_OPT_FLAGS - Ported CI gating tests to Python 3.6 - add CI gating tests - fix CVE-2018-18751: double-free in xgettext (rhbz#1647049) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - xgettext --its segfault fix (rhbz#1531476) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Depend on the exact version of the library sub package - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Depend on the exact version of the library sub package - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - xgettext --its segfault fix (rhbz#1531476) - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - fix CVE-2018-18751: double-free in xgettext (rhbz#1647049) - add CI gating tests - Ported CI gating tests to Python 3.6 - Ported CI gating tests to Python 3.6 - add CI gating tests - fix CVE-2018-18751: double-free in xgettext (rhbz#1647049) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - xgettext --its segfault fix (rhbz#1531476) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Depend on the exact version of the library sub package - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Ported CI gating tests to Python 3.6 - add CI gating tests - fix CVE-2018-18751: double-free in xgettext (rhbz#1647049) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - xgettext --its segfault fix (rhbz#1531476) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Depend on the exact version of the library sub package - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Re-add tests that were dropped in the c8s migration Resolves: rhbz#2180782 - mkfs.gfs2: Add -U UUID option Resolves: rhbz#2180782 - gfs2_jadd: Use fallocate to preallocate journals - gfs2_jadd: Don't fsync after each block written Resolves: rhbz#1942434 - mkfs.gfs2: Tighten minimum journal size checks Resolves: rhbz#1779806 - gfs2_jadd: Handle out-of-space issues - gfs2_jadd: error handling overhaul Resolves: rhbz#1833141 - gfs2.5: Update some mentions of gfs2_tool Resolves: rhbz#1818983 - mkfs.gfs2: Don't use i/o limits hints <4K for block size Resolves: rhbz#1839219 - fsck.gfs2(8): Manpage updates Resolves: rhbz#1693000 - gfs2.5: General updates and layout improvements Resolves: rhbz#1757115 - mkfs.gfs2: Improve alignment of first resource group Resolves: rhbz#1698858 - gfs2-utils: Wrong hash value used to clean journals Resolves: rhbz#1659490 - Use system crypto policy (#1640534) - Update to 2.56.1 - Update to 2.56.0 - Update to 2.55.90 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 2.55.2 - Switch to the meson build system - Update to 2.54.1 - Update to 2.54.0 - Update to 2.53.90 - Rebase fedora-crypto-policy.patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Add support to ignore trash for certain mounts - Resolves: RHEL-2836 - Add support for x-gvfs-trash mount option - Resolves: RHEL-46828 - Revert GUnixMountMonitor changes (it depends on functionality not in RHEL 8) - Resolves: RHEL-23636 - Backport GUnixMountMonitor port to libmnt_monitor - Make GUnixMountMonitor thread-safe - Resolves: RHEL-23636 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add support for x-gvfs-trash mount option - Resolves: RHEL-46828 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212187 - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions - Resolves: RHEL-212204 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212229 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212254 - Fix one-byte heap under-read in g_key_file_get_locale_string_list() - Resolves: RHEL-190587 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime magic parsing - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212187 - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions - Resolves: RHEL-212204 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212229 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212254 - Fix one-byte heap under-read in g_key_file_get_locale_string_list() - Resolves: RHEL-190587 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add support to ignore trash for certain mounts - Resolves: RHEL-2836 - Add support for x-gvfs-trash mount option - Resolves: RHEL-46828 - Revert GUnixMountMonitor changes (it depends on functionality not in RHEL 8) - Resolves: RHEL-23636 - Backport GUnixMountMonitor port to libmnt_monitor - Make GUnixMountMonitor thread-safe - Resolves: RHEL-23636 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add support for x-gvfs-trash mount option - Resolves: RHEL-46828 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212187 - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions - Resolves: RHEL-212204 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212229 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212254 - Fix one-byte heap under-read in g_key_file_get_locale_string_list() - Resolves: RHEL-190587 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime magic parsing - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212187 - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions - Resolves: RHEL-212204 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212229 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212254 - Fix one-byte heap under-read in g_key_file_get_locale_string_list() - Resolves: RHEL-190587 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add support to ignore trash for certain mounts - Resolves: RHEL-2836 - Add support for x-gvfs-trash mount option - Resolves: RHEL-46828 - Revert GUnixMountMonitor changes (it depends on functionality not in RHEL 8) - Resolves: RHEL-23636 - Backport GUnixMountMonitor port to libmnt_monitor - Make GUnixMountMonitor thread-safe - Resolves: RHEL-23636 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add support for x-gvfs-trash mount option - Resolves: RHEL-46828 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212187 - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions - Resolves: RHEL-212204 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212229 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212254 - Fix one-byte heap under-read in g_key_file_get_locale_string_list() - Resolves: RHEL-190587 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime magic parsing - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212187 - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions - Resolves: RHEL-212204 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212229 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212254 - Fix one-byte heap under-read in g_key_file_get_locale_string_list() - Resolves: RHEL-190587 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add support to ignore trash for certain mounts - Resolves: RHEL-2836 - Add support for x-gvfs-trash mount option - Resolves: RHEL-46828 - Revert GUnixMountMonitor changes (it depends on functionality not in RHEL 8) - Resolves: RHEL-23636 - Backport GUnixMountMonitor port to libmnt_monitor - Make GUnixMountMonitor thread-safe - Resolves: RHEL-23636 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add support for x-gvfs-trash mount option - Resolves: RHEL-46828 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Add patches for CVE-2024-34397, CVE-2024-52533, CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-67084 - Resolves: RHEL-94286 - Resolves: RHEL-94848 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114086 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212187 - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions - Resolves: RHEL-212204 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212229 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212254 - Fix one-byte heap under-read in g_key_file_get_locale_string_list() - Resolves: RHEL-190587 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime magic parsing - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212187 - Fix CVE-2026-58012: buffer overflow in gregex case changing substitutions - Resolves: RHEL-212204 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212229 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212254 - Fix one-byte heap under-read in g_key_file_get_locale_string_list() - Resolves: RHEL-190587 - Add patch for CVE-2026-58016 - Resolves: RHEL-190622 - Add patch for CVE-2025-14087 and CVE-2025-14512 - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Add gating.yaml, fixes bugs bz#1996984 - fixes bugs bz#1996984 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1640148 bz#1856574 bz#1910119 - Add gating.yaml, fixes bugs bz#1996984 - fixes bugs bz#1996984 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1640148 bz#1856574 bz#1910119 - Add gating.yaml, fixes bugs bz#1996984 - fixes bugs bz#1996984 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1640148 bz#1856574 bz#1910119 - Add gating.yaml, fixes bugs bz#1996984 - fixes bugs bz#1996984 - fixes bugs bz#1953901 - fixes bugs bz#1927235 - fixes bugs bz#1948547 - fixes bugs bz#1939372 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1640148 bz#1856574 bz#1910119 - Fix: CVE-2021-43618 Resolves: RHEL-23055 - Add gating.yaml Related: #1681026 - Add support for intel CET and -fcf-protection - Add missing compiler/linker flags Related: #1630567 - Missing fipschecks added into build process (bug #1553679) - --enable-fat option added to %configure (bug #1493218) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix the build process for ix89 family - Build process updated to correctly build .debug_info for i386 and to correctly use hardening flags - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix: CVE-2021-43618 Resolves: RHEL-23055 - Add gating.yaml Related: #1681026 - Add support for intel CET and -fcf-protection - Add missing compiler/linker flags Related: #1630567 - Missing fipschecks added into build process (bug #1553679) - --enable-fat option added to %configure (bug #1493218) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix the build process for ix89 family - Build process updated to correctly build .debug_info for i386 and to correctly use hardening flags - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix: CVE-2021-43618 Resolves: RHEL-23055 - Add gating.yaml Related: #1681026 - Add support for intel CET and -fcf-protection - Add missing compiler/linker flags Related: #1630567 - Missing fipschecks added into build process (bug #1553679) - --enable-fat option added to %configure (bug #1493218) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix the build process for ix89 family - Build process updated to correctly build .debug_info for i386 and to correctly use hardening flags - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix CVE-2022-34903 (#2108447) - fixes for issues found in Coverity scan - upgrade to 2.2.20 - upgrade to 2.2.9 - upgrade to 2.2.8 fixing CVE 2018-12020 - upgrade to 2.2.6 - upgrade to 2.2.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - upgrade to 2.2.4 - upgrade to 2.2.3 - Fix CVE-2025-68973 (gpg.fail/memcpy) - Fix CVE-2022-34903 (#2108447) - fixes for issues found in Coverity scan - upgrade to 2.2.20 - upgrade to 2.2.9 - upgrade to 2.2.8 fixing CVE 2018-12020 - upgrade to 2.2.6 - upgrade to 2.2.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - upgrade to 2.2.4 - Fix CVE-2022-34903 (#2108447) - fixes for issues found in Coverity scan - upgrade to 2.2.20 - upgrade to 2.2.9 - upgrade to 2.2.8 fixing CVE 2018-12020 - upgrade to 2.2.6 - upgrade to 2.2.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - upgrade to 2.2.4 - upgrade to 2.2.3 - Fix CVE-2025-68973 (gpg.fail/memcpy) - Fix CVE-2022-34903 (#2108447) - fixes for issues found in Coverity scan - upgrade to 2.2.20 - upgrade to 2.2.9 - upgrade to 2.2.8 fixing CVE 2018-12020 - upgrade to 2.2.6 - upgrade to 2.2.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - upgrade to 2.2.4 - Backport the fix for CVE-2024-12243 - Fix timing side-channel in deterministic ECDSA (RHEL-35231) - auth/rsa-psk: minimize branching after decryption (RHEL-21550) - auth/rsa_psk: side-step potential side-channel (RHEL-16754) - Clear server's session ticket indication at rehandshake (#2089817) - Fix x86_64 CPU feature detection when AVX is not available (#2131152) - Fix timing side-channel in TLS RSA key exchange (#2162598) - Fix double-free in gnutls_pkcs7_verify (#2109788) - p11tool: Document ID reuse behavior when importing certs (#1776250) - Treat SHA-1 signed CA in the trusted set differently (#1965445) - Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216) - Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990 - Backport the fix for CVE-2024-12243 - Fix timing side-channel in deterministic ECDSA (RHEL-35231) - auth/rsa-psk: minimize branching after decryption (RHEL-21550) - auth/rsa_psk: side-step potential side-channel (RHEL-16754) - Clear server's session ticket indication at rehandshake (#2089817) - Fix x86_64 CPU feature detection when AVX is not available (#2131152) - Fix timing side-channel in TLS RSA key exchange (#2162598) - Fix double-free in gnutls_pkcs7_verify (#2109788) - p11tool: Document ID reuse behavior when importing certs (#1776250) - Treat SHA-1 signed CA in the trusted set differently (#1965445) - Backport the fixes for CVE-2025-9820 and CVE-2025-14831 - Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990 - Backport the fix for CVE-2024-12243 - Fix timing side-channel in deterministic ECDSA (RHEL-35231) - auth/rsa-psk: minimize branching after decryption (RHEL-21550) - auth/rsa_psk: side-step potential side-channel (RHEL-16754) - Clear server's session ticket indication at rehandshake (#2089817) - Fix x86_64 CPU feature detection when AVX is not available (#2131152) - Fix timing side-channel in TLS RSA key exchange (#2162598) - Fix double-free in gnutls_pkcs7_verify (#2109788) - p11tool: Document ID reuse behavior when importing certs (#1776250) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1817 (session parameter loading robustness) - Backport the fixes for CVE-2025-9820 and CVE-2025-14831 - Backport the fixes for CVE-2025-6395, CVE-2025-32988 and CVE-2025-32990 - Backport the fix for CVE-2024-12243 - Fix timing side-channel in deterministic ECDSA (RHEL-35231) - auth/rsa-psk: minimize branching after decryption (RHEL-21550) - auth/rsa_psk: side-step potential side-channel (RHEL-16754) - Clear server's session ticket indication at rehandshake (#2089817) - Fix x86_64 CPU feature detection when AVX is not available (#2131152) - Fix timing side-channel in TLS RSA key exchange (#2162598) - Fix double-free in gnutls_pkcs7_verify (#2109788) - Fix memleak with older GMP (RHEL-28957) - Fix timing side-channel in deterministic ECDSA (RHEL-28957) - auth/rsa-psk: minimize branching after decryption (RHEL-21586) - auth/rsa_psk: side-step potential side-channel (RHEL-16753) - Clear server's session ticket indication at rehandshake (#2089817) - Fix x86_64 CPU feature detection when AVX is not available (#2131152) - Fix timing side-channel in TLS RSA key exchange (#2162598) - Fix double-free in gnutls_pkcs7_verify (#2109788) - p11tool: Document ID reuse behavior when importing certs (#1776250) - Treat SHA-1 signed CA in the trusted set differently (#1965445) - Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216) - Update to 1.56.1 - Update to 1.56.0 - Update to 1.55.2 - Drop /usr/bin/env shebang patch as the brp scripts now handle this correctly - Remove ldconfig scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to python3 - Cleanup spec - Add python2 to configure so shebangs are properly updated by brp-mangle-shebangs. - Switch to %ldconfig_scriptlets - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Update to 1.54.1 - Update to 1.54.0 - Add Conflicts between gobject-introspection-devel.i686 and gobject-introspection-devel.x86_64 to fix multilib conflicts - Update to 1.56.1 - Update to 1.56.0 - Update to 1.55.2 - Drop /usr/bin/env shebang patch as the brp scripts now handle this correctly - Remove ldconfig scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to python3 - Cleanup spec - Add python2 to configure so shebangs are properly updated by brp-mangle-shebangs. - Switch to %ldconfig_scriptlets - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Update to 1.54.1 - add libassuan-devel to devel pkg requirements (#RHEL-6920) - add libassuan-devel to devel pkg requirements (#RHEL-6920) - Fixed FTBFS with glibc-2.28 Resolves: rhbz#1611721 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Moved binaries to /usr/bin Resolves: rhbz#1540485 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New version Related: rhbz#1421129 - Updated patches - New version Resolves: rhbz#1421129 - New version Resolves: rhbz#1419921 - De-fuzzified patches - New version Resolves: rhbz#1402379 - De-fuzzified patches - Re-enabled 'make check', glibc seems fixed - Fix also SHELLCHECK_WARNING related: #1602530 - Fix important Covscan defects resolves: #1602530 - Add missing "bundled(gnulib)" provides resolves: #1654251 - Add unowned directories to groff-base and groff-perl resolves: #1548688 - Add missing gcc and gcc-c++ build dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Move grog/subs.pl to groff-perl subpackage where it belongs resolves: #1515167 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Debrand for AlmaLinux - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - util: Regenerate kernelopts if missing on ppc - Resolves: #2051889 - kern/ieee1275/init: sync vec5 patchset with upstream - Resolves: #2172111 - Debrand for AlmaLinux - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - Debrand for AlmaLinux - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - Debrand for AlmaLinux - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - Debrand for AlmaLinux - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - Debrand for AlmaLinux - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - Debrand for AlmaLinux - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Debrand for AlmaLinux - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Unless leapping do not force using BLS if it's not defined - Resolves: #RHEL-173826 - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Debrand for AlmaLinux - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - util: Regenerate kernelopts if missing on ppc - Resolves: #2051889 - kern/ieee1275/init: sync vec5 patchset with upstream - Resolves: #2172111 - Debrand for AlmaLinux - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - Debrand for AlmaLinux - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - Debrand for AlmaLinux - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - Debrand for AlmaLinux - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - Debrand for AlmaLinux - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - Debrand for AlmaLinux - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Debrand for AlmaLinux - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Unless leapping do not force using BLS if it's not defined - Resolves: #RHEL-173826 - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Debrand for AlmaLinux - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - util: Regenerate kernelopts if missing on ppc - Resolves: #2051889 - kern/ieee1275/init: sync vec5 patchset with upstream - Resolves: #2172111 - Debrand for AlmaLinux - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - Debrand for AlmaLinux - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - Debrand for AlmaLinux - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - Debrand for AlmaLinux - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - Debrand for AlmaLinux - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - Debrand for AlmaLinux - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Debrand for AlmaLinux - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Unless leapping do not force using BLS if it's not defined - Resolves: #RHEL-173826 - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Debrand for AlmaLinux - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - util: Regenerate kernelopts if missing on ppc - Resolves: #2051889 - kern/ieee1275/init: sync vec5 patchset with upstream - Resolves: #2172111 - Debrand for AlmaLinux - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - Debrand for AlmaLinux - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - Debrand for AlmaLinux - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - Debrand for AlmaLinux - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - Debrand for AlmaLinux - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - Debrand for AlmaLinux - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Debrand for AlmaLinux - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Unless leapping do not force using BLS if it's not defined - Resolves: #RHEL-173826 - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Debrand for AlmaLinux - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - util: Regenerate kernelopts if missing on ppc - Resolves: #2051889 - kern/ieee1275/init: sync vec5 patchset with upstream - Resolves: #2172111 - Debrand for AlmaLinux - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - Debrand for AlmaLinux - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - Debrand for AlmaLinux - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - Debrand for AlmaLinux - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - Debrand for AlmaLinux - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - Debrand for AlmaLinux - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Debrand for AlmaLinux - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Unless leapping do not force using BLS if it's not defined - Resolves: #RHEL-173826 - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Debrand for AlmaLinux - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - util: Regenerate kernelopts if missing on ppc - Resolves: #2051889 - kern/ieee1275/init: sync vec5 patchset with upstream - Resolves: #2172111 - Debrand for AlmaLinux - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - util: Enable default kernel for updates - Resolves: #RHEL-4343 - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump - Resolves: #RHEL-14283 - Debrand for AlmaLinux - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - grub-set-bootflag: Fix for CVE-2024-1048 - (CVE-2024-1048) - Resolves: #RHEL-20746 - Missing install script for previous commit - Related: #RHEL-4343 - Debrand for AlmaLinux - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - fs/ntfs: OOB write fix - (CVE-2023-4692) - Resolves: #RHEL-11566 - Debrand for AlmaLinux - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - grub-mkconfig.in: turn off executable owner bit - Resolves: #RHEL-58835 - 20-grub-install: fix SELinux security type context for BLS - Resolves: #RHEL-4395 - Debrand for AlmaLinux - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Remove BLS fake config in case of kernel removal - Resolves: #RHEL-4316 - Fix default behavior when GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-4319 - Debrand for AlmaLinux - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - ieee1275/ofnet: Fix grub_malloc() removed after added safe - Remove 'fs/ntfs: Implement attribute verification' patch - Related: #RHEL-79837 - Add Several CVE fixes - Resolves CVE-2024-45775 CVE-2025-0624 - Resolves: #RHEL-75735 - Resolves: #RHEL-79837 - Debrand for AlmaLinux - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - fs/xfs: Synced xfs to latest - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Bump NVR to sign the build - Resolves: #RHEL-85627 - Debrand for AlmaLinux - Unless leapping do not force using BLS if it's not defined - Resolves: #RHEL-173826 - Bump sbat to grub,5 - Resolves: #RHEL-177648 - Fixes CVE-2025-61662 Missing unregister call for gettext command may lead to use-after-free - Resolves: #RHEL-141583 - fs/xfs/ppc64le: Update xfs code to fix install on 4KB block size - Resolves: #RHEL-142208 - Run mkconfig when GRUB_ENABLE_BLSCFG is false - Resolves: #RHEL-113830 - Strip correctly BLS files with conf extension - Resolves: #RHEL-112099 - 99-grub-mkconfig.install: fix condition allowing correct checks if GRUB_ENABLE_BLSCFG is not present - Resolves: #RHEL-80168 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set - Resolves: #RHEL-86913 - fs/ext2: Rework of OOB read patch - Resolves: #RHEL-86553 - Do not overwrite all vars that start with GRUB_CMDLINE_LINUX - Resolves: #RHEL-12853 - Apply Marta's default args fix - Resolves: #1900829 - Backport fedora/rhel9 initial cmdline population - Resolves: #2129740 - Fix quoting of opts in grubby-bls - Resolves: #2129740 - Write to /etc/kernel/cmdline on non-s390x also - Resolves: #1978226 - Write to /etc/kernel/cmdline on s390x and only s390x - Resolves: #1978226 - Additionally write to /etc/kernel/cmdline - Resolves: #1978226 - grubby-bls: expand only the kernelopts variable Resolves: rhbz#1819666 - grubby-bls: only attempt to update the cmdline if was already set Related: rhbz#1152027 - Fix installed man page file mode bits Related: rhbz#1812065 - Have grubby only manipulate relevant entries, fallback if empty - Resolves: #RHEL-132931 - Have grubby only manipulate and display relevant entries - Resolves: #RHEL-132931 - Do not overwrite all vars that start with GRUB_CMDLINE_LINUX - Resolves: #RHEL-12853 - Apply Marta's default args fix - Resolves: #1900829 - Backport fedora/rhel9 initial cmdline population - Resolves: #2129740 - Fix quoting of opts in grubby-bls - Resolves: #2129740 - Write to /etc/kernel/cmdline on non-s390x also - Resolves: #1978226 - Write to /etc/kernel/cmdline on s390x and only s390x - Resolves: #1978226 - Additionally write to /etc/kernel/cmdline - Resolves: #1978226 - grubby-bls: expand only the kernelopts variable Resolves: rhbz#1819666 - Add setting for locking down Show Password in entries Related: #1770302 - Recommend DejaVu Sans Mono font as the default monospace font Resolves: #1656262 - Backport setting for overlay scrolling Resolves: #1723464 - Backport 'enable-hot-corners' setting Resolves: #1704355 - Restore previous monospace font default Resolves: #1715761 - Update to 3.32.0 Resolves: #1698930 - Add mount-removable-storage-devices-as-read-only option - Resovles: #1709937 - Update to 3.28.1 - Update to 3.28.0 - Update to 3.27.92 - Fix handling of selinux context when NULL - Resolves: rhbz#2061061 - Add an option for minimum lifetime - Resolves: #1721331 - More leak fixes - Resolves: #1813200 - Fix leak of mech OID in gssi_inquire_context() - Resolves: #1813200 - Document config file non-merging - Resolves: #1838222 - Delay gssproxy start until after network.target - Resolves: #1780876 - Make syslog of call status configurable - Resolves: #1759665 - Fix explicit NULL deref around encrypted token processing - Resolves: #1700539 - Update NFS service name in systemd unit - Resolves: #1701820 - Avoid uninitialized free when allocating buffers - Resolves: #1682281 - fix an arbitrary-file-write vulnerability in zgrep Resolves: CVE-2022-1271 - Fix a test failure introduced by 1.9-10 Related: 1883204 - Enable HW optimizations for modes 1-6 on s390x Resolves: 1847436 - Fix a segfault on some s390x machines when compressing multiple files Resolves: 1883204 - Another fix for the s390 patch Related: 1730332 - Apply fixes to the previous patch Resolves: 1659434 - Apply the IBM s390x optimization patch Resolves: 1659434 - Release bump for gating rebuild Related: 1681027 - Fix wrong skip size in gzexe - Add new test dealing with the ^^ (needs autoreconf) - Enable make check (needs less) Resolves: 1705413 * Tue Aug 07 2018 Jakub Martisko <jamartis@redhat.com> - 1.9-4 - Fix FTBFS bug (gnulib problems) - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html Resolves 1611722 - Escape macros in %changelog - Fix the wrong date in the previous changelog message - There's an updated version of the CVE-2026-41992 fix Resolves: CVE-2026-41992 - Fix an issue with a temporary file creations when mktemp is missing (41991) - Fix a global buffer overflow vulnerability in the LZH decompression logic (41992) Resolves: CVE-2026-41991 Resolves: CVE-2026-41992 - fix an arbitrary-file-write vulnerability in zgrep Resolves: CVE-2022-1271 - Fix a test failure introduced by 1.9-10 Related: 1883204 - Enable HW optimizations for modes 1-6 on s390x Resolves: 1847436 - Fix a segfault on some s390x machines when compressing multiple files Resolves: 1883204 - Another fix for the s390 patch Related: 1730332 - Apply fixes to the previous patch Resolves: 1659434 - Apply the IBM s390x optimization patch Resolves: 1659434 - Release bump for gating rebuild Related: 1681027 - Added gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - remove manually added pcre2 requires (this is autogenerated) - removed BuildRoot, %defattr() and Group (new Fedora Packaging Guildline) - do not use straight gcc and add use %{__global_ldflags} - use %_licensedir is no longer needed - minor cleanups: -- reformat %description to 80 col -- added full URLs in Source fields -- more macros -- a bit simpler %prep - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Patch by Todd Lewis that adds option -x to exclude files with pcre lib - This patch solves RH Bugzilla ID's 955246 1322198 - Fixed 32 bit build with gcc7 (RH Bugzilla ID 1422989) - Fixed source url and description in spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Drop the kernel-utils obsolete that was added in 2005. - backport fix for --dco-identify real max sectors calculation from upstream version 9.62 (#1959918) - fix invalid pointer free (#1833092) - fix resource leaks - New upstream version 9.54 - Use LDFLAGS from redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream version. - Cleanup spec - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - nis-domainname.service moved here from initscripts package - Add gcc to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Build with linker flags from redhat-rpm-config - New version 3.20 - New version 3.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild Related: RHEL-6946 - Update pci, usb and vendor ids Resolves: RHEL-6946 - Update pci, usb and vendor ids Resolves: RHEL-6945 - Update pci, usb and vendor ids Resolves: #2169697 - Add tests, rebuild Related: #2169692 - Update pci, usb and vendor ids Resolves: #2169692 - Update pci, usb and vendor ids Resolves: #2125564 - Update pci, usb and vendor ids Resolves: #2125563 - Update pci nd vendor ids Resolves: #2062131 - Update pci, usb and vendor ids Resolves: #2062129 - Add compat-hwloc1 subpackage [1979150] - Add support for node 0 offline - Rebuild for 8.4.0 - Upgrade RHEL to 2.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop BR/R on rdma-core-devel on arm (bz#1780813) - Update to latest version (#1663624) - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - Upstream release 1.11.12. - BR rdma-core-devel even on arm. - Add compat-hwloc1 subpackage [1979150] - Add support for node 0 offline - Rebuild for 8.4.0 - Upgrade RHEL to 2.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop BR/R on rdma-core-devel on arm (bz#1780813) - Update to latest version (#1663624) - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - Upstream release 1.11.12. - BR rdma-core-devel even on arm. - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch - Resolves: rhbz#1808238 - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和). - Resolves: rhbz#1677093 - Resolves:rh#1602551 - Fix specfile by adding compile options - also add BuildRequires for gcc and gcc-c++ - Correct the upstream URL - Resolves:rh#1602551 - Fix some covscan issues - Drop Python2 build dependency, use Python3 instead - Resolves: rhbz#1595790 - Add negative-daylight-savings.patch from upstream. (see http://bugs.icu-project.org/trac/ticket/13566 and http://bugs.icu-project.org/trac/changeset/40954) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 60.2 - Resolves: rhbz#1524820 CVE-2017-17484 - Update to 60.1 - Add compat subpackage for keeping the API stability in userspace - Bump release number for yet another rebuild - Add patch for fixing hash algorithm used through libimaevm - Add tpm2-tss as a runtime dependency - Bump release number for yet another couple of rebuilds - Bump release number for yet another build for solving wrong target usage - Bump release number for another build, handling build issues - Bump release number for forcing a new build - Rebase to upstream v1.3.2 version - Sync specfile with Fedora's version - Add patch to correctly handle key description on keyring during importation - Add compat subpackage for keeping the API stability in userspace - Bump release number for yet another rebuild - Add patch for fixing hash algorithm used through libimaevm - Add tpm2-tss as a runtime dependency - Bump release number for yet another couple of rebuilds - Bump release number for yet another build for solving wrong target usage - Bump release number for another build, handling build issues - Bump release number for forcing a new build - Rebase to upstream v1.3.2 version - Sync specfile with Fedora's version - Add patch to correctly handle key description on keyring during importation - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Fix a loop in fix-info-dir when /dev/null doesn't exist Resolves: #2022201 - Fix file mode for dir.old (fixes failing rpm -V info) Related: #1708912 - Rebuild Resolves: #1708912 - Enable gating on OSCI Resolves: #1681507 - Fix issues detected by static analysis Resolves: #1606966 - Implement transaction filetriggers for crating info/dir - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to texinfo-6.5 Resolves: #1491075 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - perl dependency renamed to perl-interpreter <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules> - ci: Update `.packit.yml` to run on `c8s` - ci: Use Differential ShellCheck action - ifup-routes: Revert quotes - ifup-routes: Use `ip replace` only on type `route` - ci: introduce GA ci from master to rhel8-branch - ci: Setup packit for RHEL8 branch - ci: Get rid of old ci files (travis and zanata) - rename_device: also support dracut-style kernel cmdline configuration - ifup-routes: Log when using `ip $type replace` - ifup-routes: Use `ip route repace` to avoid race - doc: Document ARPING_WAIT and ARPING_UPDATE_WAIT - network scripts: Avoid infinite loop of arping - network: fix condition in set_link_up() - doc: Documents ifcfg option LINKSTATUS - network: fix set_link_up() - network: add option to keep the link down - makefile: Use rpmdev-bumpspec's legacy date option - Allow updating rfkill switch status while in readonly root mode - service: Prevent variables from globbing - Allow updating mlocate.db while in readonly root mode - Add optional 'dev' keyword - man: add ifdown.8 - ci: Update `.packit.yml` to run on `c8s` - ci: Use Differential ShellCheck action - ifup-routes: Revert quotes - ifup-routes: Use `ip replace` only on type `route` - ci: introduce GA ci from master to rhel8-branch - ci: Setup packit for RHEL8 branch - ci: Get rid of old ci files (travis and zanata) - rename_device: also support dracut-style kernel cmdline configuration - ifup-routes: Log when using `ip $type replace` - ifup-routes: Use `ip route repace` to avoid race - doc: Document ARPING_WAIT and ARPING_UPDATE_WAIT - network scripts: Avoid infinite loop of arping - network: fix condition in set_link_up() - doc: Documents ifcfg option LINKSTATUS - network: fix set_link_up() - network: add option to keep the link down - makefile: Use rpmdev-bumpspec's legacy date option - Allow updating rfkill switch status while in readonly root mode - service: Prevent variables from globbing - Allow updating mlocate.db while in readonly root mode - Rebuild due to missing CI environment - Resolves: #2212772 #2193342 - patch: Delegate FIPS mode detection to configured crypto backend - patch: Disallow use of internal kenrel crypto driver names in "capi" - patch: Also disallow active devices with internal kernel names - patch: Fix init_by_name to allow unknown cipher format in dm-crypt - patch: Fix reencryption to fail properly for unknown cipher - patch: Fix activation of LUKS2 with capi format cipher and kernel - Resolves: #2212772 #2193342 - change cryptsetup-devel dependency from cryptsetup to cryptsetup-libs - Resolves: #2150254 - patch: Remove LUKS2 encryption data size restriction. - patch: Abort encryption when header and data devices are same. - Resolves: #2150254 - patch: Fix internal crypt segment compare routine - Resolves: #2110810 - patch: Fix cryptsetup --test-passphrase when device in reencryption - Resolves: #2058009 - update to cryptsetup 2.3.7 - fixes CVE-2021-4122 - patch: Fix suboptimal optimization in bundled argon2. - patch: Fix bogus memory allocation/device read with invalid LUKS2 headers - patch: Fix typo in luksRepair prompt. - Resolves: #2021815 #2022301 #2031859 - patch: Fix reencryption for custom devices with data segments set to use cipher_null. - Resolves: #1927409 - patch: Fix crypto backend to properly handle ECB mode. - Resolves: #1859091 - patch: Fix possible memory corruption in LUKS2 validation code in 32bit library. - Resolves: #1872294 - fix check for delayacct (#RHEL-16345) - do not show DELAY_ACCT error for non-existent pids(#1679201) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild for Python 3.6 - fix printing unicode strings in batch mode (#1285088) - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - SPEC file cleanup - Added licence tag - Removal of old and unneeded macros - Use of newest python macros - Removed Python 2 dependency - Added patch for Python 3 build - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Add support for RFC3021 (#1638834) - Fix segfault in the container environment - Recommend databases - Resolves: #1601400 with rebase to 0.2.4 - Another attempt at injecting LDFLAGS - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Build with linker flags from redhat-rpm-config - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - ss: Add support for dumping TCP bound-inactive sockets. (Andrea Claudi) - Bump version number (wrong exception build) - ip vrf: make ipvrf_exec SELinux-aware (Andrea Claudi) [1780023] - lib: add SELinux include and stub functions (Andrea Claudi) [1780023] - ss: make SELinux stub functions conformant to API definitions (Andrea Claudi) [1780023] - ss: make is_selinux_enabled stub work like in SELinux (Andrea Claudi) [1780023] - tc: add missing separator (Andrea Claudi) - macvlan: Add bclim parameter (Andrea Claudi) [2188134] - Update kernel headers (Andrea Claudi) [2188134] - New version 6.2.0 (Andrea Claudi) [RHEL-424] - New version 5.18.0 [2074607] - vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2056827] - vdpa: Support reading device features (Andrea Claudi) [2056827] - vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2056827] - vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2056827] - vdpa: Remove unsupported command line option (Andrea Claudi) [2056827] - uapi: update vdpa.h (Andrea Claudi) [2056827] - Update kernel headers and import virtio_net (Andrea Claudi) [2056827] - tc: u32: add json support in `print_raw`, `print_ipv4`, `print_ipv6` (Andrea Claudi) [1989591] - tc: u32: add support for json output (Andrea Claudi) [1989591] - vdpa: Enable user to set mtu of the vdpa device (Andrea Claudi) [2036880] - vdpa: Enable user to set mac address of vdpa device (Andrea Claudi) [2036880] - vdpa: Enable user to query vdpa device config layout (Andrea Claudi) [2036880] - vdpa: align uapi headers (Andrea Claudi) [2036880] - ss: Add support for dumping TCP bound-inactive sockets. (Andrea Claudi) - Bump version number (wrong exception build) - ip vrf: make ipvrf_exec SELinux-aware (Andrea Claudi) [1780023] - lib: add SELinux include and stub functions (Andrea Claudi) [1780023] - ss: make SELinux stub functions conformant to API definitions (Andrea Claudi) [1780023] - ss: make is_selinux_enabled stub work like in SELinux (Andrea Claudi) [1780023] - tc: add missing separator (Andrea Claudi) - macvlan: Add bclim parameter (Andrea Claudi) [2188134] - Update kernel headers (Andrea Claudi) [2188134] - New version 6.2.0 (Andrea Claudi) [RHEL-424] - New version 5.18.0 [2074607] - vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2056827] - vdpa: Support reading device features (Andrea Claudi) [2056827] - vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2056827] - vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2056827] - vdpa: Remove unsupported command line option (Andrea Claudi) [2056827] - uapi: update vdpa.h (Andrea Claudi) [2056827] - Update kernel headers and import virtio_net (Andrea Claudi) [2056827] - tc: u32: add json support in `print_raw`, `print_ipv4`, `print_ipv6` (Andrea Claudi) [1989591] - tc: u32: add support for json output (Andrea Claudi) [1989591] - vdpa: Enable user to set mtu of the vdpa device (Andrea Claudi) [2036880] - vdpa: Enable user to set mac address of vdpa device (Andrea Claudi) [2036880] - vdpa: Enable user to query vdpa device config layout (Andrea Claudi) [2036880] - vdpa: align uapi headers (Andrea Claudi) [2036880] - Resolves: #1781926, rebased to 2.4.19 - Resolves: #1665184, rebased to 2.4.18.1 - Related: #1682892, fix typo in tests - Resolves: #1665184, rebased to 2.4.17.1 - use better patch for udev activation - rebased to 2.4.16.1 - spec file cleanup - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Not building kernel modules, so use kernel-headers instead of kernel-devel - Rebase to 2.4.15.1 - Rebase to 7.1 (RHBZ#1649090): - Add compatibility support for strscpy() - Correct the manpage about the sort option - Add missing functions to libipset.map - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych) - Implement sorting for hash types in the ipset tool - Fix to list/save into file specified by option (reported by Isaac Good) - Introduction of new commands and protocol version 7, updated kernel include files - Add compatibility support for async in pernet_operations - Use more robust awk patterns to check for backward compatibility - Prepare the ipset tool to handle multiple protocol version - Fix warning message handlin - Correct to test null valued entry in hash:net6,port,net6 test - Library reworked to support embedding ipset completely - Add compatibility to support kvcalloc() - Validate string type attributes in attr2data() (Stefano Brivio) - manpage: Add comment about matching on destination MAC address (Stefano Brivio) (RHBZ#1649079) - Add compatibility to support is_zero_ether_addr() - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649085) - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649085) - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649085) - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) - Fixes: - Fix all shellcheck warnings in init script (RHBZ#1649085) - Make error reporting consistent, introduce different severities (RHBZ#1683711) - While restoring, on invalid entries, remove them and retry (RHBZ#1683713) - Fix covscan SC2166 warning in init script (RHBZ#1649085) - Fix loading of sets with dependencies on other sets (RHBZ#1647096), and hardcode 6.38-1.el7 for ipset-service upgrade and downgrade triggers, so that we don't run into issues with z-stream updates - Drop ipset-devel dependency on kernel-devel (RHBZ#163175) - Update to 6.38, source from RHEL7 6.38-2 (RHBZ#1615967) - Patch for missing header file (RHBZ#1543596) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 6.35 - Update to 6.32 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Userspace needs kernel-headers - rhbz#1420864 - Rebase to 7.1 (RHBZ#1649090): - Add compatibility support for strscpy() - Correct the manpage about the sort option - Add missing functions to libipset.map - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych) - Implement sorting for hash types in the ipset tool - Fix to list/save into file specified by option (reported by Isaac Good) - Introduction of new commands and protocol version 7, updated kernel include files - Add compatibility support for async in pernet_operations - Use more robust awk patterns to check for backward compatibility - Prepare the ipset tool to handle multiple protocol version - Fix warning message handlin - Correct to test null valued entry in hash:net6,port,net6 test - Library reworked to support embedding ipset completely - Add compatibility to support kvcalloc() - Validate string type attributes in attr2data() (Stefano Brivio) - manpage: Add comment about matching on destination MAC address (Stefano Brivio) (RHBZ#1649079) - Add compatibility to support is_zero_ether_addr() - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649085) - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649085) - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649085) - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) - Fixes: - Fix all shellcheck warnings in init script (RHBZ#1649085) - Make error reporting consistent, introduce different severities (RHBZ#1683711) - While restoring, on invalid entries, remove them and retry (RHBZ#1683713) - Fix covscan SC2166 warning in init script (RHBZ#1649085) - Fix loading of sets with dependencies on other sets (RHBZ#1647096), and hardcode 6.38-1.el7 for ipset-service upgrade and downgrade triggers, so that we don't run into issues with z-stream updates - Drop ipset-devel dependency on kernel-devel (RHBZ#163175) - Update to 6.38, source from RHEL7 6.38-2 (RHBZ#1615967) - Patch for missing header file (RHBZ#1543596) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 6.35 - Update to 6.32 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Userspace needs kernel-headers - rhbz#1420864 - Userspace needs kernel-headers - rhbz#1420864 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 6.32 - Update to 6.35 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Patch for missing header file (RHBZ#1543596) - Update to 6.38, source from RHEL7 6.38-2 (RHBZ#1615967) - Drop ipset-devel dependency on kernel-devel (RHBZ#163175) - Fix loading of sets with dependencies on other sets (RHBZ#1647096), and hardcode 6.38-1.el7 for ipset-service upgrade and downgrade triggers, so that we don't run into issues with z-stream updates - Rebase to 7.1 (RHBZ#1649090): - Add compatibility support for strscpy() - Correct the manpage about the sort option - Add missing functions to libipset.map - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych) - Implement sorting for hash types in the ipset tool - Fix to list/save into file specified by option (reported by Isaac Good) - Introduction of new commands and protocol version 7, updated kernel include files - Add compatibility support for async in pernet_operations - Use more robust awk patterns to check for backward compatibility - Prepare the ipset tool to handle multiple protocol version - Fix warning message handlin - Correct to test null valued entry in hash:net6,port,net6 test - Library reworked to support embedding ipset completely - Add compatibility to support kvcalloc() - Validate string type attributes in attr2data() (Stefano Brivio) - manpage: Add comment about matching on destination MAC address (Stefano Brivio) (RHBZ#1649079) - Add compatibility to support is_zero_ether_addr() - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649085) - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649085) - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649085) - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) - Fixes: - Fix all shellcheck warnings in init script (RHBZ#1649085) - Make error reporting consistent, introduce different severities (RHBZ#1683711) - While restoring, on invalid entries, remove them and retry (RHBZ#1683713) - Fix covscan SC2166 warning in init script (RHBZ#1649085) - iptables-restore: Drop dead code - iptables-apply: Eliminate shellcheck warnings - ebtables: Exit gracefully on invalid table names - Bump NVR to fix for wrong build tag - iptables-nft: fix basechain policy configuration - Update fixes from upstream once more - Fix shell test-case for older gawk version - Fix shell testcase for rebased libnftnl package - Missed to copy expected results file to destination. - Bump release for CI. - Add expected test results - Prepare testsuites for expected results - libnftnl package was rebased, depending on 1.1.6 is fine - iptables-restore: Drop dead code - iptables-apply: Eliminate shellcheck warnings - ebtables: Exit gracefully on invalid table names - Bump NVR to fix for wrong build tag - iptables-nft: fix basechain policy configuration - Update fixes from upstream once more - Fix shell test-case for older gawk version - Fix shell testcase for rebased libnftnl package - Missed to copy expected results file to destination. - Bump release for CI. - Add expected test results - Prepare testsuites for expected results - libnftnl package was rebased, depending on 1.1.6 is fine - iptables-restore: Drop dead code - iptables-apply: Eliminate shellcheck warnings - ebtables: Exit gracefully on invalid table names - Bump NVR to fix for wrong build tag - iptables-nft: fix basechain policy configuration - Update fixes from upstream once more - Fix shell test-case for older gawk version - Fix shell testcase for rebased libnftnl package - Missed to copy expected results file to destination. - Bump release for CI. - Add expected test results - Prepare testsuites for expected results - libnftnl package was rebased, depending on 1.1.6 is fine - iptables-restore: Drop dead code - iptables-apply: Eliminate shellcheck warnings - ebtables: Exit gracefully on invalid table names - Bump NVR to fix for wrong build tag - iptables-nft: fix basechain policy configuration - Update fixes from upstream once more - Fix shell test-case for older gawk version - Fix shell testcase for rebased libnftnl package - Missed to copy expected results file to destination. - Bump release for CI. - Add expected test results - Prepare testsuites for expected results - libnftnl package was rebased, depending on 1.1.6 is fine - iptables-restore: Drop dead code - iptables-apply: Eliminate shellcheck warnings - ebtables: Exit gracefully on invalid table names - Bump NVR to fix for wrong build tag - iptables-nft: fix basechain policy configuration - Update fixes from upstream once more - Fix shell test-case for older gawk version - Fix shell testcase for rebased libnftnl package - Missed to copy expected results file to destination. - Bump release for CI. - Add expected test results - Prepare testsuites for expected results - libnftnl package was rebased, depending on 1.1.6 is fine - iptables-restore: Drop dead code - iptables-apply: Eliminate shellcheck warnings - ebtables: Exit gracefully on invalid table names - Bump NVR to fix for wrong build tag - iptables-nft: fix basechain policy configuration - Update fixes from upstream once more - Fix shell test-case for older gawk version - Fix shell testcase for rebased libnftnl package - Missed to copy expected results file to destination. - Bump release for CI. - Add expected test results - Prepare testsuites for expected results - libnftnl package was rebased, depending on 1.1.6 is fine - iptables-restore: Drop dead code - iptables-apply: Eliminate shellcheck warnings - ebtables: Exit gracefully on invalid table names - Bump NVR to fix for wrong build tag - iptables-nft: fix basechain policy configuration - Update fixes from upstream once more - Fix shell test-case for older gawk version - Fix shell testcase for rebased libnftnl package - Missed to copy expected results file to destination. - Bump release for CI. - Add expected test results - Prepare testsuites for expected results - libnftnl package was rebased, depending on 1.1.6 is fine - Make sure logrotate use iptraf-ng directory. - New version 1.2.1 (Andrea Claudi) [1906097] - add tests/tests.yml Resolves: rhbz#1682317 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Build with linker flags from redhat-rpm-config - Moved upstream from https://fedorahosted.org/iptraf-ng/ to https://github.com/iptraf-ng/iptraf-ng/ with release v1.1.4 Fixes error in patch Patch03 - this fixes 1283773 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Added sources and clean tree - Use LDFLAGS from redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - New upstream version 2.2.6 - Located at github - Fixes (RHBZ#1294913 and RHBZ#1375395) - Additional upstream patch (no_debug) to drop some debugging remains - Additional proposed patch to fix segmentation fault with -1 -C (RHBZ#599181) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for GCC 5 C++11 ABI change - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Add support for VRF with ping command (#2208409) - Fix regression of output when pinging unreachable IPv6 host (#2057570) - Fix copying input IPv6 address (#2047659) - Make ping unprivileged (#2030107) - Revert patch introduced by #1852638 (#1928179) - Exit on error (#1852638) - Change error() -> fprintf() reported by covscan (#1852638) - Fix infinite loop caused by subsecond timeouts (#1852638) - Fix incorrect ping statistics (#1901780) - covscan fix (#1606968) - Add support for VRF with ping command (#2208409) - Fix regression of output when pinging unreachable IPv6 host (#2057570) - Fix copying input IPv6 address (#2047659) - Make ping unprivileged (#2030107) - Revert patch introduced by #1852638 (#1928179) - Exit on error (#1852638) - Change error() -> fprintf() reported by covscan (#1852638) - Fix infinite loop caused by subsecond timeouts (#1852638) - Fix incorrect ping statistics (#1901780) - covscan fix (#1606968) - fix gating test - move tests to tmt framework - restore missing gating tests - 2131090 fix idbm patch to not overwrite upstream changes in file mode - 1755907 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning - coverity found a use-after-free regression in iscsistart - 1924768 fix unit files for el8, not using iscsi-init - 1924768 iscsiadm -m sessions fails when racing against session login/logout - 1849931, 1869438 go back to MD5 CHAP only by default new CHAP modes can cause issue with some targets, so SHA1/SHA256/SHA3-256 modes must be configured to enable now - 1801577 new service file not enabled on upgrade, spec change to use triggers for that - backport patch for RHEL-82415 iSCSI paths fail to get reinstated - fix gating test - move tests to tmt framework - restore missing gating tests - 2131090 fix idbm patch to not overwrite upstream changes in file mode - 1755907 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning - coverity found a use-after-free regression in iscsistart - 1924768 fix unit files for el8, not using iscsi-init - 1924768 iscsiadm -m sessions fails when racing against session login/logout - 1849931, 1869438 go back to MD5 CHAP only by default new CHAP modes can cause issue with some targets, so SHA1/SHA256/SHA3-256 modes must be configured to enable now - fix gating test - move tests to tmt framework - restore missing gating tests - 2131090 fix idbm patch to not overwrite upstream changes in file mode - 1755907 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning - coverity found a use-after-free regression in iscsistart - 1924768 fix unit files for el8, not using iscsi-init - 1924768 iscsiadm -m sessions fails when racing against session login/logout - 1849931, 1869438 go back to MD5 CHAP only by default new CHAP modes can cause issue with some targets, so SHA1/SHA256/SHA3-256 modes must be configured to enable now - 1801577 new service file not enabled on upgrade, spec change to use triggers for that - backport patch for RHEL-82415 iSCSI paths fail to get reinstated - fix gating test - move tests to tmt framework - restore missing gating tests - 2131090 fix idbm patch to not overwrite upstream changes in file mode - 1755907 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning - coverity found a use-after-free regression in iscsistart - 1924768 fix unit files for el8, not using iscsi-init - 1924768 iscsiadm -m sessions fails when racing against session login/logout - 1849931, 1869438 go back to MD5 CHAP only by default new CHAP modes can cause issue with some targets, so SHA1/SHA256/SHA3-256 modes must be configured to enable now - rebase to 0.99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - switch to building as a shared library instead of static - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.97 - Upstream moved on GitHub - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - add -static Provides to the -devel package (#1284298) - new upstream location, update to 0.94 - new devel package, upstream open-iscsi is dropping it's internal copy - Fix double-free vulnerabilities in attrs.c error paths (CVE-2026-55995) - rebase to 0.99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - switch to building as a shared library instead of static - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.97 - Upstream moved on GitHub - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - add -static Provides to the -devel package (#1284298) - rebase to 0.99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - switch to building as a shared library instead of static - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.97 - Upstream moved on GitHub - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - add -static Provides to the -devel package (#1284298) - new upstream location, update to 0.94 - new devel package, upstream open-iscsi is dropping it's internal copy - Fix double-free vulnerabilities in attrs.c error paths (CVE-2026-55995) - rebase to 0.99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - switch to building as a shared library instead of static - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.97 - Upstream moved on GitHub - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - add -static Provides to the -devel package (#1284298) - rebase to 0.99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - switch to building as a shared library instead of static - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.97 - Upstream moved on GitHub - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - add -static Provides to the -devel package (#1284298) - new upstream location, update to 0.94 - new devel package, upstream open-iscsi is dropping it's internal copy - Fix double-free vulnerabilities in attrs.c error paths (CVE-2026-55995) - rebase to 0.99 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - switch to building as a shared library instead of static - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.97 - Upstream moved on GitHub - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - add -static Provides to the -devel package (#1284298) - Update to 5.19 from upstream Resolves: rhbz#2187198 - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Build with linker flags from redhat-rpm-config - Fixup bogus date in the changelog... - Update to 4.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 4.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Rebase to 2.14 Related: rhbz#2001062 - Deal with warnings under gcc 8 - Call va_end after va_copy in json_vsprintf - Fix bogus date in jansson.spec - Change to python3-sphinx - Update to Jansson 2.11 - Add missing BuildRequires on gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Add upstream patch for optional arguments to json_pack() - Migrate to use autosetup macro - Removed multilib packages file conflicts (rh #1853148) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - new upstream release 0.77 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - new upstream release 0.76 - Start versioning symbols when building library - Resolves: rhbz#2001063 - rebuild (#1954436) - Fix CVE-2020-12762 out-of-bounds write via a large JSON file - Resolves: rhbz#1835626 - Move json-c-devel to AppStream - Don't package empty /usr/share/doc/json-c - Resolves: rhbz#1741076 - Do not use --enable-rdrand - Resolves: rhbz#1806532 - disable bootstrap for RHEL8 - Bootstrapping for so-name bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update patch fixing a segfault caused by possible invalid frees - Update to 1.4.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 1.4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 1.3.2 - Switch to the meson build system - Update to 1.2.8 - Update to 1.2.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to eedfcbf - Resolves: rhbz#2213162 - Upload Source0 - Resolves RHBZ#1778928 - Update to b52ac13 to include latest upstream changes - Resolves RHBZ#1778928 - Update to 6fbd644 to fix RHBZ 1642806 - Update to b8863d05565e91bd3fb40d9e9d562be081f09669 - Fixes RHBZ#1543803 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to upstream 545535ab2d5ea093074f5df5723901756d22f298 - Fixes RHBZ#1538977 - Update do upstream a6bced6ef7b263380ac0309bdbd4a98c6f9055eb - Add libasan-devel per request - Update to upstream e6af311e3182417f86742a5b1a78e488593f975a - Fix vlock when console or terminal is closed abruptly Resolves: #2178798 - Add %check, rebuild - Rebuild Resolves: #1844967 - Fix issues found by static analysis Resoloves: #1602566 - Drop initscripts Require Resolves: #1610277 - Rebuilt (reuploaded upstream tarball, the checksum differed) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix CVE-2026-72693: openvt -u process matching more conservative Resolves: RHEL-235979 - Fix vlock when console or terminal is closed abruptly Resolves: #2178798 - Add %check, rebuild - Rebuild Resolves: #1844967 - Fix issues found by static analysis Resoloves: #1602566 - Drop initscripts Require Resolves: #1610277 - Rebuilt (reuploaded upstream tarball, the checksum differed) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix vlock when console or terminal is closed abruptly Resolves: #2178798 - Add %check, rebuild - Rebuild Resolves: #1844967 - Fix issues found by static analysis Resoloves: #1602566 - Drop initscripts Require Resolves: #1610277 - Rebuilt (reuploaded upstream tarball, the checksum differed) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix CVE-2026-72693: openvt -u process matching more conservative Resolves: RHEL-235979 - Fix vlock when console or terminal is closed abruptly Resolves: #2178798 - Add %check, rebuild - Rebuild Resolves: #1844967 - Fix issues found by static analysis Resoloves: #1602566 - Drop initscripts Require Resolves: #1610277 - Rebuilt (reuploaded upstream tarball, the checksum differed) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix vlock when console or terminal is closed abruptly Resolves: #2178798 - Add %check, rebuild - Rebuild Resolves: #1844967 - Fix issues found by static analysis Resoloves: #1602566 - Drop initscripts Require Resolves: #1610277 - Rebuilt (reuploaded upstream tarball, the checksum differed) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix CVE-2026-72693: openvt -u process matching more conservative Resolves: RHEL-235979 - Fix vlock when console or terminal is closed abruptly Resolves: #2178798 - Add %check, rebuild - Rebuild Resolves: #1844967 - Fix issues found by static analysis Resoloves: #1602566 - Drop initscripts Require Resolves: #1610277 - Rebuilt (reuploaded upstream tarball, the checksum differed) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - dracut-module-setup: Skip initrd-cleanup and initrd-parse-etc in kdump - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking - kdumpctl: Only returns immediately after an error occurs in check_*_modified - powerpc: update kdumpctl to load kernel signing key for fadump - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded - Introduce a function to get reserved memory size - Add lvm thin provision to kdump supported-kdump-targets.txt - mkdumprd: Use the correct syntax to redirect the stderr to null - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS - Add NICs that handle DNS queries to the allowlist - Revert "Revert "Append both nofail and x-systemd.before to kdump mount target" - dracut-module-setup.sh: skip installing driver for the loopback interface - Reduce kdump memory consumption by only installing needed NIC drivers - Revert "Append both nofail and x-systemd.before to kdump mount target" - mkdumprd: Fix makedumpfile parameter check - dracut-module-setup: Skip initrd-cleanup and initrd-parse-etc in kdump - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking - kdumpctl: Only returns immediately after an error occurs in check_*_modified - powerpc: update kdumpctl to load kernel signing key for fadump - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded - Introduce a function to get reserved memory size - Add lvm thin provision to kdump supported-kdump-targets.txt - mkdumprd: Use the correct syntax to redirect the stderr to null - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS - Add NICs that handle DNS queries to the allowlist - Revert "Revert "Append both nofail and x-systemd.before to kdump mount target" - dracut-module-setup.sh: skip installing driver for the loopback interface - Reduce kdump memory consumption by only installing needed NIC drivers - Use the correct regex to match eth.* - mkdumprd: Fix makedumpfile parameter check - dracut-module-setup: Skip initrd-cleanup and initrd-parse-etc in kdump - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking - kdumpctl: Only returns immediately after an error occurs in check_*_modified - powerpc: update kdumpctl to load kernel signing key for fadump - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded - Introduce a function to get reserved memory size - Add lvm thin provision to kdump supported-kdump-targets.txt - mkdumprd: Use the correct syntax to redirect the stderr to null - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS - Add NICs that handle DNS queries to the allowlist - Revert "Revert "Append both nofail and x-systemd.before to kdump mount target" - Fix DNS server unreachable - Use the correct regex to match eth.* - mkdumprd: Fix makedumpfile parameter check - dracut-module-setup: Skip initrd-cleanup and initrd-parse-etc in kdump - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking - kdumpctl: Only returns immediately after an error occurs in check_*_modified - powerpc: update kdumpctl to load kernel signing key for fadump - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded - Introduce a function to get reserved memory size - Add lvm thin provision to kdump supported-kdump-targets.txt - mkdumprd: Use the correct syntax to redirect the stderr to null - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS - Add NICs that handle DNS queries to the allowlist - Fix potential strcat overflow found by Coverity in CI test (#1661674). - Fix TTL handling on DNS lookups (#1661674). - Fix testsuite for rhel-8 (#1681963). - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Include sys/types.h in keyutils.h. - The dns resolver needs limits.h. - Overhaul of all manual pages. - Some manual pages moved to Linux man-pages project. - Add Diffie-Helman keyctl function. - Pass ldflags into the build so hardening works - Fix potential strcat overflow found by Coverity in CI test (#1661674). - Fix TTL handling on DNS lookups (#1661674). - Fix testsuite for rhel-8 (#1681963). - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Include sys/types.h in keyutils.h. - The dns resolver needs limits.h. - Overhaul of all manual pages. - Some manual pages moved to Linux man-pages project. - Add Diffie-Helman keyctl function. - Pass ldflags into the build so hardening works - Fix potential strcat overflow found by Coverity in CI test (#1661674). - Fix TTL handling on DNS lookups (#1661674). - Fix testsuite for rhel-8 (#1681963). - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Include sys/types.h in keyutils.h. - The dns resolver needs limits.h. - Overhaul of all manual pages. - Some manual pages moved to Linux man-pages project. - Add Diffie-Helman keyctl function. - Pass ldflags into the build so hardening works - Add symvers.xz support to weak-modules - Resolves: RHEL-8903 - depmod: fix parallel execution issues Resolves: rhbz#2026938 - weak-modules: do not require dracut wneh using --no-initramfs Resolves: rhbz#1935416 - weak-modules: reset compatible_modules if configuration is not valid Resolves: rhbz#1907855 - weak-modules: update_modules_for_krel: always finish sandbox - weak-modules: groupping: use dependencies of extra/ provider Resolves: rhbz#1778889 - weak-modules: reverse checking order for add-kernel Resolves: rhbz#1755196 - modprobe: do not fail on built-in modules Resolves: rhbz#1767513 - weak-modules: handle independent modules in one run Resolves: rhbz#1695763 - weak-modules: use asterisk for kernel version in sandbox Resolves: rhbz#1689052 - add PKCS7/openssl support. Resolves: rhbz#1668459. - Rebuilt for latest 4.18 kernel. - Related: RHEL-11425 - Rebuilt for latest 4.18 kernel. - Related: RHEL-11425 - Rebuilt for latest 4.18 kernel. - Related: rhbz#2173037 - Rebuilt for latest 4.18 kernel. - Related: rhbz#2173037 - Rebuilt for latest 4.18 kernel. - Related: rhbz#2173037 - Rebuilt for latest 4.18 kernel. - Related: rhbz#2173037 - Fixed bug in read-only rebuild when the logical size of the volume is an exact multiple of 821 4K blocks. - Resolves: rhbz#2166131 - Added a check for 0 length table line arguments. - Resolves: rhbz#2142080 - Rebuilt for latest 4.18 kernel. - Related: rhbz#2119819 - Adapted to backported kernel changes. - Resolves: rhbz#2139242 - Add symvers.xz support to weak-modules - Resolves: RHEL-8903 - depmod: fix parallel execution issues Resolves: rhbz#2026938 - weak-modules: do not require dracut wneh using --no-initramfs Resolves: rhbz#1935416 - weak-modules: reset compatible_modules if configuration is not valid Resolves: rhbz#1907855 - weak-modules: update_modules_for_krel: always finish sandbox - weak-modules: groupping: use dependencies of extra/ provider Resolves: rhbz#1778889 - weak-modules: reverse checking order for add-kernel Resolves: rhbz#1755196 - modprobe: do not fail on built-in modules Resolves: rhbz#1767513 - weak-modules: handle independent modules in one run Resolves: rhbz#1695763 - weak-modules: use asterisk for kernel version in sandbox Resolves: rhbz#1689052 - add PKCS7/openssl support. Resolves: rhbz#1668459. - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch * Fixes bz #2141996 - Modify tests/multipath_conf_syntax/main.sh * fix unrelated test error - Resolves: bz #2141996 - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch * Fixes bz #2128885 - Add 0117-libmultipath-cleanup-remove_feature.patch - Add 0118-libmultipath-cleanup-add_feature.patch - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch * Fixes bz #2022359 - Resolves: bz #2022359, #2128885 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch * Fixes bz #2141996 - Modify tests/multipath_conf_syntax/main.sh * fix unrelated test error - Resolves: bz #2141996 - Add 0139-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch * Fixes RHEL-126675 ("RHEL 8.10 mpathpersist -i --report-capabilities -d returns the wrong results") - Resolves: RHEL-126675 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0140-libmultipath-set-offline-whenever-path-is-not-online.patch * Fixes RHEL-131907 ("multipathd doesn't print checker messages for some offline path states") - Resolves: RHEL-131907 - Add 0139-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch * Fixes RHEL-126675 ("RHEL 8.10 mpathpersist -i --report-capabilities -d returns the wrong results") - Resolves: RHEL-126675 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - augment kpatch-dnf package versioning to satisfy build (rhbz#2121211) - rebase kpatch user utility code to v0.9.7 (rhbz#2121211) - Do not rm selinux rpm owned directory (rhbz#2065609) - Add /usr/lib/kpatch to install and files list to appease SELinux (rhbz#2022123) - Update kpatch utility to 0.9.4 and kpatch-dnf to 0.4 (rhbz#2006841) - Cleanup /var/lib/kpatch directory on uninstall (rhbz#1930108) - Fix kpatch-dnf package description typos (rhbz#1934293) - Remove kpatch-dnf dependency on python3 (rhbz#1912224) - Fix unload issue under stress (rhbz#1883238) - Fix dnf-kpatch man file permissions (rhbz#1899341) - Do not replace dnf kpatch configuration file when reinstalling (rhbz#1898191) - Add kpatch-dnf subpackage (rhbz#1798711) - Rebase kpatch DNF plugin with upstream to 0.5 (RHEL-85574) - augment kpatch-dnf package versioning to satisfy build (rhbz#2121211) - rebase kpatch user utility code to v0.9.7 (rhbz#2121211) - Do not rm selinux rpm owned directory (rhbz#2065609) - Add /usr/lib/kpatch to install and files list to appease SELinux (rhbz#2022123) - Update kpatch utility to 0.9.4 and kpatch-dnf to 0.4 (rhbz#2006841) - Cleanup /var/lib/kpatch directory on uninstall (rhbz#1930108) - Fix kpatch-dnf package description typos (rhbz#1934293) - Remove kpatch-dnf dependency on python3 (rhbz#1912224) - Fix unload issue under stress (rhbz#1883238) - Fix dnf-kpatch man file permissions (rhbz#1899341) - Do not replace dnf kpatch configuration file when reinstalling (rhbz#1898191) - Provide a list of CVEs currently patched using live patches (RHEL-185842) - Rebase kpatch DNF plugin with upstream to 0.5 (RHEL-85574) - augment kpatch-dnf package versioning to satisfy build (rhbz#2121211) - rebase kpatch user utility code to v0.9.7 (rhbz#2121211) - Do not rm selinux rpm owned directory (rhbz#2065609) - Add /usr/lib/kpatch to install and files list to appease SELinux (rhbz#2022123) - Update kpatch utility to 0.9.4 and kpatch-dnf to 0.4 (rhbz#2006841) - Cleanup /var/lib/kpatch directory on uninstall (rhbz#1930108) - Fix kpatch-dnf package description typos (rhbz#1934293) - Remove kpatch-dnf dependency on python3 (rhbz#1912224) - augment kpatch-dnf package versioning to satisfy build (rhbz#2121211) - rebase kpatch user utility code to v0.9.7 (rhbz#2121211) - Do not rm selinux rpm owned directory (rhbz#2065609) - Add /usr/lib/kpatch to install and files list to appease SELinux (rhbz#2022123) - Update kpatch utility to 0.9.4 and kpatch-dnf to 0.4 (rhbz#2006841) - Cleanup /var/lib/kpatch directory on uninstall (rhbz#1930108) - Fix kpatch-dnf package description typos (rhbz#1934293) - Remove kpatch-dnf dependency on python3 (rhbz#1912224) - Fix unload issue under stress (rhbz#1883238) - Fix dnf-kpatch man file permissions (rhbz#1899341) - Do not replace dnf kpatch configuration file when reinstalling (rhbz#1898191) - Add kpatch-dnf subpackage (rhbz#1798711) - Rebase kpatch DNF plugin with upstream to 0.5 (RHEL-85574) - augment kpatch-dnf package versioning to satisfy build (rhbz#2121211) - rebase kpatch user utility code to v0.9.7 (rhbz#2121211) - Do not rm selinux rpm owned directory (rhbz#2065609) - Add /usr/lib/kpatch to install and files list to appease SELinux (rhbz#2022123) - Update kpatch utility to 0.9.4 and kpatch-dnf to 0.4 (rhbz#2006841) - Cleanup /var/lib/kpatch directory on uninstall (rhbz#1930108) - Fix kpatch-dnf package description typos (rhbz#1934293) - Remove kpatch-dnf dependency on python3 (rhbz#1912224) - Fix unload issue under stress (rhbz#1883238) - Fix dnf-kpatch man file permissions (rhbz#1899341) - Do not replace dnf kpatch configuration file when reinstalling (rhbz#1898191) - Provide a list of CVEs currently patched using live patches (RHEL-185842) - Rebase kpatch DNF plugin with upstream to 0.5 (RHEL-85574) - augment kpatch-dnf package versioning to satisfy build (rhbz#2121211) - rebase kpatch user utility code to v0.9.7 (rhbz#2121211) - Do not rm selinux rpm owned directory (rhbz#2065609) - Add /usr/lib/kpatch to install and files list to appease SELinux (rhbz#2022123) - Update kpatch utility to 0.9.4 and kpatch-dnf to 0.4 (rhbz#2006841) - Cleanup /var/lib/kpatch directory on uninstall (rhbz#1930108) - Fix kpatch-dnf package description typos (rhbz#1934293) - Remove kpatch-dnf dependency on python3 (rhbz#1912224) - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066316 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171589 RHEL-171594 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066316 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171589 RHEL-171594 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066316 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171589 RHEL-171594 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066316 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171589 RHEL-171594 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066316 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171589 RHEL-171594 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066316 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171589 RHEL-171594 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Resolves: #2043450 ksc: Support Authorization header in bugzilla API - Use platform-python in place of python3 - Resolves: #2043450 ksc: Support Authorization header in bugzilla API - Rebase to latest ksc release - Resolves: #1954340 ksc: i18n issues, - Add release to Source0 - Resolves: #1886901 Avoid divisive language - Resolves: #1912506 File bugs with Tracking keyword by default - Resolves: #1729039 Extend ksc output to include environment metadata - (OSCI) Add kmod to Makefile-generated Requires - Resolves: #1729039 Extend ksc output to include environment metadata - Add modinfo vermagic field to the output. - Add kmod (provides modinfo) to requires. - Resolves: #1647528 ksc add feature to copy justifications between ksc... - Resolves: #1648026 ksc add a non-processed .ko file - Resolves: #1647974 piped input causes ksc to fail when asking for user input - Add support for justification carry over. - Add support for symbol filtering using -K. - Fix input problems when piping through to ksc. - Extend manpage with EXAMPLES section. - Version bump fo 1.5. - Resolves: #1643187 ksc manpage lies -k can only be specified once - Resolves: #1645335 FILE is shown in ksc man page but no explain or effect - Support for multiple -k arguments added - Man page reworded to match ksc behaviour - Resolves: #1642134 Error restrict bugs to groups without permission while trying to submit RHEL8 symbols - New ksc reports will no longer be submitted under redhat bugzilla group. - At least one bugzilla group must be specified by a ksc user, otherwise ksc will terminate with an error. - Version bump to 1.3 - Version bump to resolve RPMDiff blockers. - Related: #1641485 - resolves: RHEL-16509 - Update to libldb-2.8.0 - resolves: rhbz#2190427 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190427 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190427 - Update to version 2.7.2 - resolves: rhbz#2132052 - Update to version 2.6.1 - resolves: rhbz#2108998 - Rebuild to include python3-ldb-devel in CRB - Rebase to version 2.5.2 - resolves: rhbz#2109016 - Fix CVE-2022-32746 - related: rhbz#2077484 - Rebase to version 2.5.1 - resolves: rhbz#2077484 - Rebase to version 2.5.0 - resolves: rhbz#2013605 - Rebase to version 2.4.1 - resolves: RHEL-12109 - Fix performance regression with indexes - resolves: RHEL-16509 - Update to libldb-2.8.0 - resolves: rhbz#2190427 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190427 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190427 - Update to version 2.7.2 - resolves: rhbz#2132052 - Update to version 2.6.1 - resolves: rhbz#2108998 - Rebuild to include python3-ldb-devel in CRB - Rebase to version 2.5.2 - resolves: rhbz#2109016 - Fix CVE-2022-32746 - related: rhbz#2077484 - Rebase to version 2.5.1 - resolves: rhbz#2077484 - Rebase to version 2.5.0 - update to 0.97 (#2159588) - drop downstream patch - ipmi: avoid error messages on non-dell platforms - Decrease log level of IPMI messages (#2148944) - Use systemd-rpm-macros to handle ledmon.service (#2073331) - update to 0.96 (#2041713) - update to 0.95 (#1841501) - tests: fix test to run on reverse depedency pipeline (#1912591) - update to 0.94 (#1780521) - update to 0.93 (#1721928) - tests: fix tests (#1681030) - tests: fix tests (#1681030) - Fix: CVE-2022-48624 - Resolves: RHEL-26123 - new release, per upstream release notes: http://greenwoodsoftware.com/less/news.530.html - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - read correctly text files named accidentally '*.rpm' (rhbz#1449790) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Resolves: rhbz#1389577 Update to new upstream release - Prefer gpg2 over gpg for *.gpg (rhbz#1383284) - again use the correct '||' syntax in LESSOPEN variable (rhbz#1254837) - Fix CVE-2024-32487 - Resolves: RHEL-32738 - Fix CVE-2022-48624 - Resolves: RHEL-26124 - new release, per upstream release notes: http://greenwoodsoftware.com/less/news.530.html - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - read correctly text files named accidentally '*.rpm' (rhbz#1449790) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Resolves: rhbz#1389577 Update to new upstream release - Prefer gpg2 over gpg for *.gpg (rhbz#1383284) - fix RPATH rpminspect reports - actually apply an included patch - preserve failed setfacl return code (RHEL-3909) - new upstream release - update link to POSIX.1e draft in acl(5) man page (#1510527) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473845) - update URL of the upstream source tarball - setfacl.1: document the meaning of '-' in perms (#1337039) - avoid failure of %check when building as root (#1085389) - apply patches automatically to ease maintenance - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111) - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216) - fix RPATH rpminspect reports - actually apply an included patch - preserve failed setfacl return code (RHEL-3909) - new upstream release - update link to POSIX.1e draft in acl(5) man page (#1510527) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473845) - update URL of the upstream source tarball - fix RPATH rpminspect reports - actually apply an included patch - preserve failed setfacl return code (RHEL-3909) - new upstream release - update link to POSIX.1e draft in acl(5) man page (#1510527) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473845) - update URL of the upstream source tarball - setfacl.1: document the meaning of '-' in perms (#1337039) - avoid failure of %check when building as root (#1085389) - apply patches automatically to ease maintenance - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111) - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216) - fix RPATH rpminspect reports - actually apply an included patch - preserve failed setfacl return code (RHEL-3909) - new upstream release - update link to POSIX.1e draft in acl(5) man page (#1510527) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473845) - update URL of the upstream source tarball - rebase to 0.3.112 - main feature: async poll support - Resolves: rhbz#1645556 - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer) - Get rid of -nostartfiles -nostdlib (Jeff Moyer) - Resolves: rhbz#1630578 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - rebase to 0.3.112 - main feature: async poll support - Resolves: rhbz#1645556 - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer) - Get rid of -nostartfiles -nostdlib (Jeff Moyer) - Resolves: rhbz#1630578 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Backport AsStore locking patches from upstream - Add new as_utils_vercmp_full() API for gnome-software - New upstream release - Add new API for gnome-software - Set the AppStream ID from the X-Flatpak desktop key - New upstream release - Do not restrict the maximum number of releases allowed - Throw an error when a launchable desktop-id is invalid - New upstream release - Support localised text in agreement sections - New upstream release - Add AS_APP_QUIRK_DEVELOPER_VERIFIED - Escape quotes in attributes - Provide async variants of store load functions - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - New upstream release - Do not parse firmware files anymore - Do not require a release transaction when validating in relaxed mode - Extract release descriptions and agreement sections for translation - New upstream release - Convert local icons found in metainfo files - Follow the Debian tilde usage when ordering versions - Use the launchable to find the desktop filename - New upstream release - Add as_version_string() for fwupd - Add support for component agreements - Correctly compare version numbers like '1.2.3' and '1.2.3a' - Don't include the path component in the name when parsing the package filename - If the launchable is specified don't guess it when composing - Never add more than one component to the AppStream store when composing - Fix for CVE-2022-36227 - Resolves: #2037839 - Do not follow symlinks when processing the fixup list (CVE-2021-31566) - Fix handling of symbolic link ACLs (CVE-2021-23177) - Rebase to version 3.3.3 - Fix out-of-bounds read (CVE-2019-19221) (#1803967) - Fix CVE-2019-18408: RAR use-after-free - fix use-after-free in delayed newc link processing (#1602575) - fix a few obvious resource leaks and strcpy() misuses (#1602575) - fixed use after free in RAR decoder (#1700752) - fixed double free in RAR decoder (#1700753) - release bump due to gating (#1680768) - Resolves: CVE-2025-5914 - Skip compression-level=1 size check on s390x. - Related to https://github.com/libarchive/libarchive/issues/1515 - Fix for CVE-2022-36227 - Resolves: #2037839 - Do not follow symlinks when processing the fixup list (CVE-2021-31566) - Fix handling of symbolic link ACLs (CVE-2021-23177) - Rebase to version 3.3.3 - Fix out-of-bounds read (CVE-2019-19221) (#1803967) - Fix CVE-2019-18408: RAR use-after-free - fix use-after-free in delayed newc link processing (#1602575) - fix a few obvious resource leaks and strcpy() misuses (#1602575) - fixed use after free in RAR decoder (#1700752) - fixed double free in RAR decoder (#1700753) - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121 - Resolves: CVE-2025-5914 - Skip compression-level=1 size check on s390x. - Related to https://github.com/libarchive/libarchive/issues/1515 - Fix for CVE-2022-36227 - Resolves: #2037839 - Do not follow symlinks when processing the fixup list (CVE-2021-31566) - Fix handling of symbolic link ACLs (CVE-2021-23177) - Rebase to version 3.3.3 - Fix out-of-bounds read (CVE-2019-19221) (#1803967) - Fix CVE-2019-18408: RAR use-after-free - fix use-after-free in delayed newc link processing (#1602575) - fix a few obvious resource leaks and strcpy() misuses (#1602575) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - backport std::regex check for invalid range (#2001788) - require docbook-style-xsl instead of docbook5-style-xsl (#2073888) - backport Default widths with -fdec-format-defaults patch (#2074614) - AlmaLinux changes - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - AlmaLinux changes - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - AlmaLinux changes - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - AlmaLinux changes - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - AlmaLinux changes - Update libstdc++ pretty printers from GCC 16 GTS (RHEL-169099) - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - new upstream release 2.5.1 - new upstream release 2.4.4 - .spec cosmetics, update source URLs - Drop unneeded pth-devel dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - new upstream release - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - backport std::regex check for invalid range (#2001788) - require docbook-style-xsl instead of docbook5-style-xsl (#2073888) - backport Default widths with -fdec-format-defaults patch (#2074614) - AlmaLinux changes - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - AlmaLinux changes - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - AlmaLinux changes - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - AlmaLinux changes - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - AlmaLinux changes - Update libstdc++ pretty printers from GCC 16 GTS (RHEL-169099) - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - backport std::regex check for invalid range (#2001788) - require docbook-style-xsl instead of docbook5-style-xsl (#2073888) - backport Default widths with -fdec-format-defaults patch (#2074614) - AlmaLinux changes - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - AlmaLinux changes - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - AlmaLinux changes - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - AlmaLinux changes - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - AlmaLinux changes - Update libstdc++ pretty printers from GCC 16 GTS (RHEL-169099) - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - temporarily provide attr/xattr.h symlink until users are migrated (#1601482) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473853) - apply patches automatically to ease maintenance - update URL of the upstream source tarball - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - update project URL (#1418475) - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121) - fix couple of rpminspect warnings - temporarily provide attr/xattr.h symlink until users are migrated (#1601482) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473853) - apply patches automatically to ease maintenance - update URL of the upstream source tarball - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - temporarily provide attr/xattr.h symlink until users are migrated (#1601482) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473853) - apply patches automatically to ease maintenance - update URL of the upstream source tarball - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - update project URL (#1418475) - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr (RHEL-186121) - fix couple of rpminspect warnings - temporarily provide attr/xattr.h symlink until users are migrated (#1601482) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix test-suite failure with perl-5.26.0 (#1473853) - apply patches automatically to ease maintenance - update URL of the upstream source tarball - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Bump NVR for subpackage release. - Bump NVR for BaseOS move. - Fix directory ownership in python3 subpackage - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Revert python3 macro changes - New upstream release - Resolves: rhbz#2048668 - Request to add libdhash-devel package into CRB - Resolves: rhbz#1611714 - [RHEL8-S-BUILD] ding-libs Fails Scratch Build on rhel-8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - INI: Remove definiton of TRACE_LEVEL - INI: Silence ini_augment match failures - New upstream release 0.6.1 - Backport INI merge detection support - Migrate to autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - kernel update - Related: rhbz#2097413 - kernel update - Related: rhbz#2010431 - fix LDFLAGS passing - Related: rhbz#2023488 - update [1995111] - update [1944754] - update [1944754] - new kernel version [1919345] - new kernel version [1919345] - new kernel version [1846820] - add Conflicts for bcc < 0.10 [1855816] - Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878) Resolves: RHEL-169304 - Bump release version to restore upgrade path Resolves: RHEL-19359 - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210637 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2210644 - check for successful memory allocation related: rhbz#2062648 - avoid overwriting errno set by prctl resolves: rhbz#2062648 - rebase to 2.48 resolves: rhbz#2032813 - fix ambient capabilities for non-root users resolves: rhbz#1950187 - added CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE capabilities resolves: rhbz#1946982 rhbz#1921576 - added patch implementing support for ambient capabilities resolves: rhbz#1487388 - changed url - rebuild - Bump release version to restore upgrade path Resolves: RHEL-19362 - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210637 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2210644 - check for successful memory allocation related: rhbz#2062648 - avoid overwriting errno set by prctl resolves: rhbz#2062648 - rebase to 2.48 resolves: rhbz#2032813 - fix ambient capabilities for non-root users resolves: rhbz#1950187 - added CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE capabilities resolves: rhbz#1946982 rhbz#1921576 - added patch implementing support for ambient capabilities resolves: rhbz#1487388 - changed url - rebuild - update to 2.26 - Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878) Resolves: RHEL-169304 - Bump release version to restore upgrade path Resolves: RHEL-19359 - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210637 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2210644 - check for successful memory allocation related: rhbz#2062648 - avoid overwriting errno set by prctl resolves: rhbz#2062648 - rebase to 2.48 resolves: rhbz#2032813 - fix ambient capabilities for non-root users resolves: rhbz#1950187 - added CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE capabilities resolves: rhbz#1946982 rhbz#1921576 - added patch implementing support for ambient capabilities resolves: rhbz#1487388 - changed url - rebuild - Bump release version to restore upgrade path Resolves: RHEL-19362 - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210637 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2210644 - check for successful memory allocation related: rhbz#2062648 - avoid overwriting errno set by prctl resolves: rhbz#2062648 - rebase to 2.48 resolves: rhbz#2032813 - fix ambient capabilities for non-root users resolves: rhbz#1950187 - added CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE capabilities resolves: rhbz#1946982 rhbz#1921576 - added patch implementing support for ambient capabilities resolves: rhbz#1487388 - changed url - rebuild - update to 2.26 resolves: rhbz#1939386 - Rebase libcap-ng to version 0.7.11 resolves: rhbz#1740775 - segfault after dlclose resolves: rhbz#1599364 - filecap fails of files with no capabilities resolves: rhbz#1599364 - filecap fails of files with no capabilities - Drop python2 bindings (#1588449) - New upstream bugfix release - Switch to %ldconfig_scriptlets - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Add Provides for the old name without %_isa - Python 2 binary package renamed to python2-libcap-ng See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 resolves: rhbz#1939386 - Rebase libcap-ng to version 0.7.11 resolves: rhbz#1740775 - segfault after dlclose resolves: rhbz#1599364 - filecap fails of files with no capabilities resolves: rhbz#1599364 - filecap fails of files with no capabilities - Drop python2 bindings (#1588449) - New upstream bugfix release - Switch to %ldconfig_scriptlets - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Add Provides for the old name without %_isa - Python 2 binary package renamed to python2-libcap-ng See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 resolves: rhbz#1939386 - Rebase libcap-ng to version 0.7.11 resolves: rhbz#1740775 - segfault after dlclose resolves: rhbz#1599364 - filecap fails of files with no capabilities resolves: rhbz#1599364 - filecap fails of files with no capabilities - Drop python2 bindings (#1588449) - New upstream bugfix release - Switch to %ldconfig_scriptlets - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Add Provides for the old name without %_isa - Python 2 binary package renamed to python2-libcap-ng See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 resolves: rhbz#1939386 - Rebase libcap-ng to version 0.7.11 resolves: rhbz#1740775 - segfault after dlclose resolves: rhbz#1599364 - filecap fails of files with no capabilities resolves: rhbz#1599364 - filecap fails of files with no capabilities - Drop python2 bindings (#1588449) - New upstream bugfix release - Switch to %ldconfig_scriptlets - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Add Provides for the old name without %_isa - Python 2 binary package renamed to python2-libcap-ng See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - resolves: #1606973 fix important Covscan defects - resolves: #1611122 fix CVE-2018-14348 - backport several upstream fixes - set Delegate property for cgconfig service to make sure complete cgroup hierarchy is always created by systemd - add missing gcc-c++ build dependency - add missing gcc build dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - resolves: #1384504 api.c: preserve dirty flag when copying controller values - resolves: #1606973 fix important Covscan defects - resolves: #1611122 fix CVE-2018-14348 - backport several upstream fixes - set Delegate property for cgconfig service to make sure complete cgroup hierarchy is always created by systemd - add missing gcc-c++ build dependency - add missing gcc build dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - resolves: #1384504 api.c: preserve dirty flag when copying controller values - resolves: #1606973 fix important Covscan defects - resolves: #1611122 fix CVE-2018-14348 - backport several upstream fixes - set Delegate property for cgconfig service to make sure complete cgroup hierarchy is always created by systemd - add missing gcc-c++ build dependency - add missing gcc build dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - resolves: #1384504 api.c: preserve dirty flag when copying controller values - Resolves: rhbz#2048668 - Request to add libdhash-devel package into CRB - Resolves: rhbz#1611714 - [RHEL8-S-BUILD] ding-libs Fails Scratch Build on rhel-8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - INI: Remove definiton of TRACE_LEVEL - INI: Silence ini_augment match failures - New upstream release 0.6.1 - Backport INI merge detection support - Migrate to autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Build and package e2scrub package - remove e2fsprogs-1.45.6-Makefile.in-Disable-e2scrub.patch - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - libext2fs: fix unix_io's Direct I/O support - Related: RHEL-106939 - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Build and package e2scrub package - remove e2fsprogs-1.45.6-Makefile.in-Disable-e2scrub.patch - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - libext2fs: fix unix_io's Direct I/O support - Related: RHEL-106939 - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Update to 0.1.18 - Fix issues detected by static analyzers - Remove Python 2 support - Backport patch: Don't print empty requires - Update to 0.1.16 - Make inline function __comps_objmrtree_all also static (RhBug:1793424) - Fix memory leaks and resource leaks - Fix: Check result "comps_parse_parsed_init()" - Use already implemented clear for COMPS_HSList (RhBug:1888343) - Do not skip type=mandatory in xml output (RhBug:1771224) - Fix segfault caused by empty dict created by *_by_lang in python api (RhBug:1757959) - Backport patch: Fix order of asserts in unit test (RhBug:1713220) - Update to 0.1.11 - Fix resource leaks, double free, unused code, optimize - Resolves: rhbz#1606974 - Disable Python 2 subpackage (and dependent) by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - fix pdf file by having a pre-generated pdf as source1 (bz 1292449) - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - update to 1.5 - rebuilt for gcc-5.0.0-0.22.fc23 - Fix CVE-2020-12825 Resolves: #1866484 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 0.6.12 - Disable strict aliasing, since the code is not strict-aliasing-clean - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Update to 0.6.11 - Update to 0.6.10 - Update to 0.6.9 - Use make_install macro - Mark COPYING and COPYING.LIB as %license - Tighten -devel subpackage deps - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337) - control code in cookie denial of service (CVE-2022-35252) - setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703) - fix HTTP compression denial of service (CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - noproxy: support proxies specified using cidr notation (RHEL-86910) - disable test1456 (requires test framework features not in 7.61.1) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - NTLM: use HTTP/1.0 instead of HTTP/1.1 for compatibility (RHEL-171912) - noproxy: support proxies specified using cidr notation (RHEL-86910) - disable test1456 (requires test framework features not in 7.61.1) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337) - control code in cookie denial of service (CVE-2022-35252) - setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703) - fix HTTP compression denial of service (CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - noproxy: support proxies specified using cidr notation (RHEL-86910) - disable test1456 (requires test framework features not in 7.61.1) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - NTLM: use HTTP/1.0 instead of HTTP/1.1 for compatibility (RHEL-171912) - noproxy: support proxies specified using cidr notation (RHEL-86910) - disable test1456 (requires test framework features not in 7.61.1) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337) - control code in cookie denial of service (CVE-2022-35252) - setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703) - fix HTTP compression denial of service (CVE-2022-32206) - fix FTP-KRB bad message verification (CVE-2022-32208) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - noproxy: support proxies specified using cidr notation (RHEL-86910) - disable test1456 (requires test framework features not in 7.61.1) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - NTLM: use HTTP/1.0 instead of HTTP/1.1 for compatibility (RHEL-171912) - noproxy: support proxies specified using cidr notation (RHEL-86910) - disable test1456 (requires test framework features not in 7.61.1) - AWS Signature Version 4 authentication support (RHEL-116183) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - sftp: do not specify O_APPEND when not in append mode (#2187717) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix HTTP multi-header compression denial of service (CVE-2023-23916) - h2: lower initial window size to 32 MiB (#2166254) - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121655 - NTLM: force the connection to HTTP/1.1 (RHEL-73788) * crypto: ensure crypto initialization works (RHEL-102601) - libssh: Fix matching user-specified MD5 hex key (RHEL-94574) - asyn-thread: fix EBADF regression (RHEL-85602) - make up incomplete patch for host name wildcard checking (RHEL-5680) - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602) - asyn-thread: create a socketpair to wait on (RHEL-34906) - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641) - provide common cleanup method for push headers (CVE-2024-2398) - fix incorrect backport of bz2229800 (RHEL-44684) - when keyboard-interactive auth fails, try password (#2229800) - cap SFTP packet size sent (RHEL-5311) - unify the upload/method handling (CVE-2023-28322) - fix cookie injection with none file (CVE-2023-38546) - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657) - lowercase the domain names before PSL checks (CVE-2023-46218) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Apply the previous change only on aarch64 to limit the risk of unwanted impact - Resolves: #1992402 - Bad order of sys calls cause high CPU usage - Resolves: #1992402 - Patch no. 42 was added - Resolves: CVE-2019-2708 - Resolves: #1856237 - Rebuild for rhel 8.3.0 - Optimize trickle thread CPU usage (#1670768) - Fixed flaws found by coverity - Resolves: #1606978 - Add patch to workaround issues on large systems (>1024 CPU) Resolves: #1664031 - Use AES from OpenSSL for encryption - Resolves: #1618640 - Link db_dump185 with RPM_LD_FLAGS (#1624127) - Add patch for CDB race issue (#1616259) - Apply the previous change only on aarch64 to limit the risk of unwanted impact - Resolves: #1992402 - Bad order of sys calls cause high CPU usage - Resolves: #1992402 - Patch no. 42 was added - Resolves: CVE-2019-2708 - Resolves: #1856237 - Rebuild for rhel 8.3.0 - Optimize trickle thread CPU usage (#1670768) - Fixed flaws found by coverity - Resolves: #1606978 - Add patch to workaround issues on large systems (>1024 CPU) Resolves: #1664031 - Use AES from OpenSSL for encryption - Resolves: #1618640 - Link db_dump185 with RPM_LD_FLAGS (#1624127) - Add patch for CDB race issue (#1616259) - Resolves: rhbz#2048668 - Request to add libdhash-devel package into CRB - Resolves: rhbz#1611714 - [RHEL8-S-BUILD] ding-libs Fails Scratch Build on rhel-8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - INI: Remove definiton of TRACE_LEVEL - INI: Silence ini_augment match failures - New upstream release 0.6.1 - Backport INI merge detection support - Migrate to autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch * Fixes bz #2141996 - Modify tests/multipath_conf_syntax/main.sh * fix unrelated test error - Resolves: bz #2141996 - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch * Fixes bz #2128885 - Add 0117-libmultipath-cleanup-remove_feature.patch - Add 0118-libmultipath-cleanup-add_feature.patch - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch * Fixes bz #2022359 - Resolves: bz #2022359, #2128885 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch * Fixes bz #2141996 - Modify tests/multipath_conf_syntax/main.sh * fix unrelated test error - Resolves: bz #2141996 - Add 0139-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch * Fixes RHEL-126675 ("RHEL 8.10 mpathpersist -i --report-capabilities -d returns the wrong results") - Resolves: RHEL-126675 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 - Add 0140-libmultipath-set-offline-whenever-path-is-not-online.patch * Fixes RHEL-131907 ("multipathd doesn't print checker messages for some offline path states") - Resolves: RHEL-131907 - Add 0139-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch * Fixes RHEL-126675 ("RHEL 8.10 mpathpersist -i --report-capabilities -d returns the wrong results") - Resolves: RHEL-126675 - Add 0138-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch - Resolves: RHEL-72573 - Add 0137-multipathd-Make-sure-to-disable-queueing-if-recovery.patch - Resolves: RHEL-16563 - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch * Add support in multipathd for NVMe to listen for FPIN-Li events and mark effected paths as marginal - Resolves: RHEL-6677 - Add OSCI tests directory - Make kpartx_id installation location relative to /usr/lib/udev/rules.d - Resolves: bz #2164871 - Add 0132-multipathd-make-pr-registration-consistent.patch - Add 0133-libmultipath-make-prflag-an-enum.patch - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch - Resolves: bz #2164871 - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 - Added patch for almalinux bugtracker - Added patch to support multiple keys - Set default SELinux labels on GnuPG directories (RHEL-6421) - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244) - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253) - Update translations - Support "proxy=_none_" in main config (RhBug:2155713) - Add repoid to solver error messages (RhBug:2179409,2179413) - Update translations - Allow change of arch during security updates with noarch (RhBug:2124483) - Fix listing a repository without cpeid (RhBug:2066334) - Add obsoletes to filtering for advisory candidates - Added patch for almalinux bugtracker - Added patch to support multiple keys - Do not set a default SELinux creation context if SELinux appears to be disabled (RHEL-43231) - Set default SELinux labels on GnuPG directories (RHEL-6421) - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244) - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253) - Update translations - Support "proxy=_none_" in main config (RhBug:2155713) - Add repoid to solver error messages (RhBug:2179409,2179413) - Update translations - Allow change of arch during security updates with noarch (RhBug:2124483) - Fix listing a repository without cpeid (RhBug:2066334) - Added patch for almalinux bugtracker - Added patch to support multiple keys - Fix calculating a difference between two same-version RPM transactions (RHEL-68770) - Do not set a default SELinux creation context if SELinux appears to be disabled (RHEL-43231) - Set default SELinux labels on GnuPG directories (RHEL-6421) - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244) - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253) - Update translations - Support "proxy=_none_" in main config (RhBug:2155713) - Add repoid to solver error messages (RhBug:2179409,2179413) - Update translations - Allow change of arch during security updates with noarch (RhBug:2124483) - Add gcc BR - Build verbosely - Drop obsolete --enable-widec configure option - Fix "unused direct shared library dependency" warning from rpmlint again - Fix man page error due to BSD nroff macro that is not available on Linux - Drop explicit R on pkgconfig from the -devel package, autogenerated - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New version (0:3.1-18.20170329cvs) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix file conflict with readline (rhbz#1349671) - New version (0:3.1-15.20160618) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 2.00.1 - Add proper Obsoletes/Provides for liberation-narrow-fonts - Resolves: rhbz#1614529 - Updated the BuildRequires to python3 and using latest build - Changed the upstream URL - Resolves: rhbz#1615541: BR:python3-devel - Resolves: rhbz#1617907: Updated License from Liberation to OFL - Resolves: rhbz#1643920: Removed Obsoletes: liberation-narrow-fonts and Provides: liberation-narrow-fonts macro - Resolves: #1682441 - Added CI tests - Resolves: #1664501 - liberation-fonts-common contains fonts.dir - Splitted the font family(mono, sans and serif) into diferrent root font directories - Resolves: #1664501 - updated .uuid file permission in ghost macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 2.00.1 - Add proper Obsoletes/Provides for liberation-narrow-fonts - Resolves: rhbz#1614529 - Updated the BuildRequires to python3 and using latest build - Changed the upstream URL - Resolves: rhbz#1615541: BR:python3-devel - Resolves: rhbz#1617907: Updated License from Liberation to OFL - Resolves: rhbz#1643920: Removed Obsoletes: liberation-narrow-fonts and Provides: liberation-narrow-fonts macro - Resolves: #1682441 - Added CI tests - Resolves: #1664501 - liberation-fonts-common contains fonts.dir - Splitted the font family(mono, sans and serif) into diferrent root font directories - Resolves: #1664501 - updated .uuid file permission in ghost macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 2.00.1 - Add proper Obsoletes/Provides for liberation-narrow-fonts - Resolves: rhbz#1614529 - Updated the BuildRequires to python3 and using latest build - Changed the upstream URL - Resolves: rhbz#1615541: BR:python3-devel - Resolves: rhbz#1617907: Updated License from Liberation to OFL - Resolves: rhbz#1643920: Removed Obsoletes: liberation-narrow-fonts and Provides: liberation-narrow-fonts macro - Resolves: #1682441 - Added CI tests - Resolves: #1664501 - liberation-fonts-common contains fonts.dir - Splitted the font family(mono, sans and serif) into diferrent root font directories - Resolves: #1664501 - updated .uuid file permission in ghost macro - Initial release after splitting it from liberation-fonts tarball due to license incompatibility. - updated as per pkg review comments #840878 - spec file clean up - added fontpackages-filesystem in requires - new release since liberation-narrow font is seperted from liberation 1.x - Resolves: rhbz#1614530 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 2.00.1 - Add proper Obsoletes/Provides for liberation-narrow-fonts - Resolves: rhbz#1614529 - Updated the BuildRequires to python3 and using latest build - Changed the upstream URL - Resolves: rhbz#1615541: BR:python3-devel - Resolves: rhbz#1617907: Updated License from Liberation to OFL - Resolves: rhbz#1643920: Removed Obsoletes: liberation-narrow-fonts and Provides: liberation-narrow-fonts macro - Resolves: #1682441 - Added CI tests - Resolves: #1664501 - liberation-fonts-common contains fonts.dir - Splitted the font family(mono, sans and serif) into diferrent root font directories - Resolves: #1664501 - updated .uuid file permission in ghost macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 2.00.1 - Add proper Obsoletes/Provides for liberation-narrow-fonts - Resolves: rhbz#1614529 - Updated the BuildRequires to python3 and using latest build - Changed the upstream URL - Resolves: rhbz#1615541: BR:python3-devel - Resolves: rhbz#1617907: Updated License from Liberation to OFL - Resolves: rhbz#1643920: Removed Obsoletes: liberation-narrow-fonts and Provides: liberation-narrow-fonts macro - Resolves: #1682441 - Added CI tests - Resolves: #1664501 - liberation-fonts-common contains fonts.dir - Splitted the font family(mono, sans and serif) into diferrent root font directories - Resolves: #1664501 - updated .uuid file permission in ghost macro - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Fix CVE-2026-63385: HTTP header injection via CRLF in header values - Resolves: RHEL-253566 - Fix CVE-2026-63387: out-of-bounds write in evdns dnsname_to_labels - Resolves: RHEL-249889 - Fix CVE-2026-63383: out-of-bounds read in decode_tag_internal - Resolves: RHEL-250240 - Fix CVE-2026-63384: integer overflow in evtag_unmarshal_header - Resolves: RHEL-250071 - Fix CVE-2026-63388: heap out-of-bounds write via AF_UNIX+http+NDEBUG - Resolves: RHEL-250045 - Fix CVE-2026-63382: HTTP request smuggling via Transfer-Encoding - Resolves: RHEL-253525 - Install documentation files to an unversioned directory - Resolves: rhbz#1638032 - Corrected the License tag - Resolves: rhbz#1624851 - Port the python scripts to Python 3 - Explicitly express SONAME in the %file section - Install documentation files to an unversioned directory - Resolves: rhbz#1638032 - Corrected the License tag - Resolves: rhbz#1624851 - Port the python scripts to Python 3 - Explicitly express SONAME in the %file section - Fix ownership of pkg-config files - Remove unneeded Group tag - Updated to the latest upstream release 2.1.8 (bz 1418488) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix CVE-2026-63385: HTTP header injection via CRLF in header values - Resolves: RHEL-253566 - Fix CVE-2026-63387: out-of-bounds write in evdns dnsname_to_labels - Resolves: RHEL-249889 - Fix CVE-2026-63383: out-of-bounds read in decode_tag_internal - Resolves: RHEL-250240 - Fix CVE-2026-63384: integer overflow in evtag_unmarshal_header - Resolves: RHEL-250071 - Fix CVE-2026-63388: heap out-of-bounds write via AF_UNIX+http+NDEBUG - Resolves: RHEL-250045 - Fix CVE-2026-63382: HTTP request smuggling via Transfer-Encoding - Resolves: RHEL-253525 - Install documentation files to an unversioned directory - Resolves: rhbz#1638032 - Corrected the License tag - Resolves: rhbz#1624851 - Port the python scripts to Python 3 - Explicitly express SONAME in the %file section - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Updated to the latest upstream release 2.1.8 (bz 1418488) - Fix ownership of pkg-config files - Remove unneeded Group tag - Explicitly express SONAME in the %file section - Port the python scripts to Python 3 - Corrected the License tag - Resolves: rhbz#1624851 - Install documentation files to an unversioned directory - Resolves: rhbz#1638032 - Update to upstream release 1.18.0 - Add gating tests - Resolves: rhbz#2153009 - Re-enable autotools remake to fix unwanted rpath in binaries. - Resolves: rhbz#2168098 - Update to upstream release 1.17.0 - Resolves: rhbz#2168098 - Update to upstream release 1.15.1 - Disable LTO on x86_64 due to memory issues (copied from Fedora) - Resolves: rhbz#2040450 - Rebase to upstream release v1.14.0 - Resolves: bz1970601 - Rebase to upstream release v1.12.1 - Enable psm3 support - Resolves: bz1921238 - Rebase to upstream release v1.11.2 - Fix "shm" segfault issue - Resolves: bz1904291 - Rebase to upstream release v1.11.1 - EFA Support requires libfabric - Resolves: bz1831145, bz1852636 - Rebase to upstream release v1.10.0 - Resolves: bz1739283 - Rebase to upstream release v1.9.0rc1 - Resolves: bz1719678 - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - Use /etc/sysconfig/libffi-force-shared-memory-check-first to override selinux permissions check for shared memory access (#2014228) - Use memfd_create() to allocate closures (#1875340) - Add $LIBFFI_TMPDIR environment variable support (#1723951) - Revert 1652930 until 1721569 can be fixed (#1652930) - closures: Create temporary file with O_TMPFILE and O_CLOEXEC (#1720600) - aarch64: Flush code alias mapping after creating closure (#1652930) - Compile with -Wa,--generate-missing-build-notes=yes - Fix declared license: BSD => MIT. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Use /etc/sysconfig/libffi-force-shared-memory-check-first to override selinux permissions check for shared memory access (#2014228) - Use memfd_create() to allocate closures (#1875340) - Add $LIBFFI_TMPDIR environment variable support (#1723951) - Revert 1652930 until 1721569 can be fixed (#1652930) - closures: Create temporary file with O_TMPFILE and O_CLOEXEC (#1720600) - aarch64: Flush code alias mapping after creating closure (#1652930) - Compile with -Wa,--generate-missing-build-notes=yes - Fix declared license: BSD => MIT. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - New upstream release - Add git version in --version - Fix list of new symbols in index page - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - New upstream release - This fixes the security bug known as CVE-2018-5345 - Add new API for fwupd - Do not encode timezone in generated files - Fix countless memory leaks when parsing corrupt files - Fix the calculation of the checksum on big endian machines - Switch to the Meson buildsystem - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 0.7 release update. - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Bump NVR and rebuild due to a mistakenly deleted build - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - backport std::regex check for invalid range (#2001788) - require docbook-style-xsl instead of docbook5-style-xsl (#2073888) - backport Default widths with -fdec-format-defaults patch (#2074614) - AlmaLinux changes - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - AlmaLinux changes - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - AlmaLinux changes - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - AlmaLinux changes - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - AlmaLinux changes - Update libstdc++ pretty printers from GCC 16 GTS (RHEL-169099) - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - Fix CVE-2021-33560 (#2018525) - Fix for CVE-2021-40528 (#1971421) - Enable HW optimizations in FIPS (#1976137) - Performance enchancements for ChaCha20 and Poly1305 (#1855231) - Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231) - add PBKDF2 selftest for FIPS POST - new upstream version 1.8.5 - AES performance improvements backported from master branch - FIPS module is implicit with kernel FIPS flag - always run the FIPS selftests if FIPS module is installed - improve the continuous FIPS entropy test - add CMAC selftest for FIPS POST - add continuous FIPS entropy test - disable non-approved FIPS hashes in the enforced FIPS mode - make only_urandom a default in non-presence of configuration file - run the full FIPS selftests only when the library is called from application - new upstream version 1.8.3 - fix behavior when getrandom syscall is not present (#1542453) - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext - Fix CVE-2021-33560 (#2018525) - Fix for CVE-2021-40528 (#1971421) - Enable HW optimizations in FIPS (#1976137) - Performance enchancements for ChaCha20 and Poly1305 (#1855231) - Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231) - add PBKDF2 selftest for FIPS POST - new upstream version 1.8.5 - AES performance improvements backported from master branch - FIPS module is implicit with kernel FIPS flag - always run the FIPS selftests if FIPS module is installed - improve the continuous FIPS entropy test - add CMAC selftest for FIPS POST - add continuous FIPS entropy test - disable non-approved FIPS hashes in the enforced FIPS mode - make only_urandom a default in non-presence of configuration file - run the full FIPS selftests only when the library is called from application - new upstream version 1.8.3 - Fix CVE-2021-33560 (#2018525) - Fix for CVE-2021-40528 (#1971421) - Enable HW optimizations in FIPS (#1976137) - Performance enchancements for ChaCha20 and Poly1305 (#1855231) - Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231) - add PBKDF2 selftest for FIPS POST - new upstream version 1.8.5 - AES performance improvements backported from master branch - FIPS module is implicit with kernel FIPS flag - always run the FIPS selftests if FIPS module is installed - improve the continuous FIPS entropy test - add CMAC selftest for FIPS POST - add continuous FIPS entropy test - disable non-approved FIPS hashes in the enforced FIPS mode - make only_urandom a default in non-presence of configuration file - run the full FIPS selftests only when the library is called from application - new upstream version 1.8.3 - fix behavior when getrandom syscall is not present (#1542453) - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext - Fix CVE-2021-33560 (#2018525) - Fix for CVE-2021-40528 (#1971421) - Enable HW optimizations in FIPS (#1976137) - Performance enchancements for ChaCha20 and Poly1305 (#1855231) - Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231) - add PBKDF2 selftest for FIPS POST - new upstream version 1.8.5 - AES performance improvements backported from master branch - FIPS module is implicit with kernel FIPS flag - always run the FIPS selftests if FIPS module is installed - improve the continuous FIPS entropy test - add CMAC selftest for FIPS POST - add continuous FIPS entropy test - disable non-approved FIPS hashes in the enforced FIPS mode - make only_urandom a default in non-presence of configuration file - run the full FIPS selftests only when the library is called from application - new upstream version 1.8.3 - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - backport std::regex check for invalid range (#2001788) - require docbook-style-xsl instead of docbook5-style-xsl (#2073888) - backport Default widths with -fdec-format-defaults patch (#2074614) - AlmaLinux changes - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - AlmaLinux changes - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - AlmaLinux changes - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - AlmaLinux changes - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - AlmaLinux changes - Update libstdc++ pretty printers from GCC 16 GTS (RHEL-169099) - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - backport std::regex check for invalid range (#2001788) - require docbook-style-xsl instead of docbook5-style-xsl (#2073888) - backport Default widths with -fdec-format-defaults patch (#2074614) - AlmaLinux changes - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - AlmaLinux changes - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - AlmaLinux changes - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - AlmaLinux changes - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - AlmaLinux changes - Update libstdc++ pretty printers from GCC 16 GTS (RHEL-169099) - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - new upstream release 1.31 - new upstream release 1.29 - Backport patch which adds riscv64 support. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - new upstream release 1.27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - new upstream release 1.25 - new upstream release 1.31 - new upstream release 1.29 - Backport patch which adds riscv64 support. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - new upstream release 1.27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - new upstream release 1.25 + libgudev-232-4 - Remove umockdev dependency - Pull in patch from upstream to fix build - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 232 - Enable self tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - New upstream version - Port to the Meson build system - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New upstream version - Add new API allowing devices to be auto-opened - New upstream version - Correctly detect removed devices when rescanning - Fix a memory leak when using control tranfers - Fix symbol version table up to version 0.2.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - New upstream version - Add g_usb_context_wait_for_replug() - Install gusbcmd as a debugging aid - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt to pick up missing -devel package BZ#1688313 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - sync with upstream, adds new portspeed definitions - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - fix for non-PCI netdevs - rebase to upstream v1.0.17 - sync with upstream, extends portspeed support up to 40 Gbit - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - fix for non-PCI netdevs - rebase to upstream v1.0.17 - sync with upstream, extends portspeed support up to 40 Gbit - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - hugeadm: "ERROR: Invalid group specification" fix (1832243) - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296) - Follow up fix for harden the testcases (1785296) - Fix: huge_page_setup_helper.py: SyntaxError: Missing parentheses in call to 'print' (1821938) - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296) - Fix: Introduce libhugetlbfs-tests subpkg for CI tests (1688930) - trim repetitive changelogs for interim debug builds - Fix: task-size-overrun hung over 8 hours on ppc64le (1737370) - Introduce libhugetlbfs-tests subpkg for CI tests (1688930) - Fix: Adding CI gating basic infrastructure (1680621) - Adding CI gating basic infrastructure (1680621) - Fix small_const/small_data is not hugepage test failures (1628794) - Finish up Python3 conversion fo tests/run_tests.py (1620250) - hugeadm: "ERROR: Invalid group specification" fix (1832243) - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296) - Follow up fix for harden the testcases (1785296) - Fix: huge_page_setup_helper.py: SyntaxError: Missing parentheses in call to 'print' (1821938) - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296) - Fix: Introduce libhugetlbfs-tests subpkg for CI tests (1688930) - trim repetitive changelogs for interim debug builds - Fix: task-size-overrun hung over 8 hours on ppc64le (1737370) - Introduce libhugetlbfs-tests subpkg for CI tests (1688930) - Fix: Adding CI gating basic infrastructure (1680621) - Adding CI gating basic infrastructure (1680621) - Fix small_const/small_data is not hugepage test failures (1628794) - Finish up Python3 conversion fo tests/run_tests.py (1620250) - hugeadm: "ERROR: Invalid group specification" fix (1832243) - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296) - Follow up fix for harden the testcases (1785296) - Fix: huge_page_setup_helper.py: SyntaxError: Missing parentheses in call to 'print' (1821938) - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296) - Fix: Introduce libhugetlbfs-tests subpkg for CI tests (1688930) - trim repetitive changelogs for interim debug builds - Fix: task-size-overrun hung over 8 hours on ppc64le (1737370) - Introduce libhugetlbfs-tests subpkg for CI tests (1688930) - Fix: Adding CI gating basic infrastructure (1680621) - Adding CI gating basic infrastructure (1680621) - Fix small_const/small_data is not hugepage test failures (1628794) - Finish up Python3 conversion fo tests/run_tests.py (1620250) - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - updated to 4.2.3 (RHEL-11411) - fix selfcheck in FIPS mode (RHEL-14892) - Resolves: RHEL-11411 RHEL-14892 - icastats: Fix summary option (#2223697) - Resolves: #2223697 - updated to 4.2.2 (#2159718) - FIPS 140-3 compliance (#2159748) - Resolves: #2159718 #2159748 - fix permissions for shared memory segments (#2167363) - Resolves: #2167363 - updated to 4.1.1 (#2110375) - Resolves: #2110375 - updated to 4.0.2 (#2101766) - Resolves: #2101766 - updated to 4.0.1 (#2043843) - Resolves: #2043843 #2043904 - updated to 3.9.0 (#1984972) - Resolves: #1984972 - updated to 3.8.0 (#1919224) - make software fallback call to openSSL/libcrypto (#1922205) - Resolves: #1919224 #1922205 - fix FIPS integrity validation (#1857130) - Resolves: #1857130 - updated to 4.2.3 (RHEL-11411) - fix selfcheck in FIPS mode (RHEL-14892) - Resolves: RHEL-11411 RHEL-14892 - icastats: Fix summary option (#2223697) - Resolves: #2223697 - updated to 4.2.2 (#2159718) - FIPS 140-3 compliance (#2159748) - Resolves: #2159718 #2159748 - fix permissions for shared memory segments (#2167363) - Resolves: #2167363 - updated to 4.1.1 (#2110375) - Resolves: #2110375 - updated to 4.0.2 (#2101766) - Resolves: #2101766 - updated to 4.0.1 (#2043843) - Resolves: #2043843 #2043904 - updated to 3.9.0 (#1984972) - Resolves: #1984972 - updated to 3.8.0 (#1919224) - make software fallback call to openSSL/libcrypto (#1922205) - Resolves: #1919224 #1922205 - fix FIPS integrity validation (#1857130) - Resolves: #1857130 - Update Requires of libical-glib-devel - Address a warning found by Coverity Scan - Update upstream URL - Update to 3.0.3 - Remove patch to allow DATE-only COMPLETED property (fixed upstream) - Add upstream patch to allow DATE-only COMPLETED property - Update to 3.0.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuild for ICU 60.1 - Update to 3.0.1 - Add a patch to Correct possible deadlock caused in icaltimezone_load_builtin_timezone() - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch - Resolves: rhbz#1808238 - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和). - Resolves: rhbz#1677093 - Resolves:rh#1602551 - Fix specfile by adding compile options - also add BuildRequires for gcc and gcc-c++ - Correct the upstream URL - Resolves:rh#1602551 - Fix some covscan issues - Drop Python2 build dependency, use Python3 instead - Resolves: rhbz#1595790 - Add negative-daylight-savings.patch from upstream. (see http://bugs.icu-project.org/trac/ticket/13566 and http://bugs.icu-project.org/trac/changeset/40954) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 60.2 - Resolves: rhbz#1524820 CVE-2017-17484 - Update to 60.1 - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch - Resolves: rhbz#1808238 - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和). - Resolves: rhbz#1677093 - Resolves:rh#1602551 - Fix specfile by adding compile options - also add BuildRequires for gcc and gcc-c++ - Correct the upstream URL - Resolves:rh#1602551 - Fix some covscan issues - Drop Python2 build dependency, use Python3 instead - Resolves: rhbz#1595790 - Add negative-daylight-savings.patch from upstream. (see http://bugs.icu-project.org/trac/ticket/13566 and http://bugs.icu-project.org/trac/changeset/40954) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 60.2 - Resolves: rhbz#1524820 CVE-2017-17484 - Update to 60.1 - Update to 60.1 - Resolves: rhbz#1524820 CVE-2017-17484 - Update to 60.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Add negative-daylight-savings.patch from upstream. (see http://bugs.icu-project.org/trac/ticket/13566 and http://bugs.icu-project.org/trac/changeset/40954) - Drop Python2 build dependency, use Python3 instead - Resolves: rhbz#1595790 - Resolves:rh#1602551 - Fix some covscan issues - Resolves:rh#1602551 - Fix specfile by adding compile options - also add BuildRequires for gcc and gcc-c++ - Correct the upstream URL - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和). - Resolves: rhbz#1677093 - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch - Resolves: rhbz#1808238 - Update to 2.2.0 (#1674201) - Drop obsolete scriptlets - Upgrade to 2.0.5 (#1577864, #1579825) - Split RPM scriptlets (#1563832) - Use splitting suggestions from Nikos Mavrogiannopoulos instead - Split cli utilities out into a sub package - Spec file cleanups - Added upstream patch to fix silently transliterated decoded domain names (#1556954) - Added upstream patch to fix STD3 ASCII rules (#1543021) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Upgrade to 2.0.4 (#1486881, #1486882) - Upgrade to 2.0.3 (#1468608, #1474324) - Resolves: rhbz#2048668 - Request to add libdhash-devel package into CRB - Resolves: rhbz#1611714 - [RHEL8-S-BUILD] ding-libs Fails Scratch Build on rhel-8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - INI: Remove definiton of TRACE_LEVEL - INI: Silence ini_augment match failures - New upstream release 0.6.1 - Backport INI merge detection support - Migrate to autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - backport std::regex check for invalid range (#2001788) - require docbook-style-xsl instead of docbook5-style-xsl (#2073888) - backport Default widths with -fdec-format-defaults patch (#2074614) - AlmaLinux changes - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - AlmaLinux changes - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - AlmaLinux changes - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - AlmaLinux changes - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - AlmaLinux changes - Update libstdc++ pretty printers from GCC 16 GTS (RHEL-169099) - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest - Resolves: #2066316 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - Fix kprop for propagating dump files larger than 4GB - Resolves: #2026462 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Try harder to avoid password change replay errors - Resolves: #2077563 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Backport fix of memory use after free during libkrad cleanup - Backport support for larger RADIUS attributes in libkrad - Resolves: rhbz#2103125 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140968 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Support PAC with KDC extended signature and without ticket signature - Resolves: rhbz#2169477 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Remove downloadable source signature file - Resolves: rhbz#2219654 - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171589 RHEL-171594 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-109220 - Improving kerberos ulog resize efficiency Resolves: RHEL-93333 - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-86786 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88049 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82648 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-78248 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56060 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-50253 - Remove RSA protocol for PKINIT Resolves: RHEL-17616 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45398 RHEL-45386 - Fix leak of default credentials in gss_inquire_cred() Resolves: RHEL-32258 - Fix memory leak in GSSAPI interface Resolves: RHEL-27250 - Fix memory leak in PMAP RPC interface Resolves: RHEL-27244 - Make TCP waiting time configurable Resolves: RHEL-17131 - Allow to make AD-SIGNEDPATH optional Resolves: RHEL-10514 - Bump release number - Backport fixes for kcapi-hasher target option Related: RHEL-15300 - Fix kcapi tests in FIPS mode Resolves: RHEL-2406 - Update to new upstream release 1.4.0 Resolves: RHEL-5366 - Add a patch to fix auxiliary tests in FIPS mode Resolves: RHEL-2406 - Add a patch to zeroize kcapi-hasher for FIPS 140-3 Resolves: RHEL-15290 - Add a patch to allow overriding target file in kcapi-hasher Resolves: RHEL-15300 - Fix double free issue in hasher() - [RHEL] Update to upstream version 1.2.0 - Enables building on old kernels [sync fix in Fedora from omosnance]. - This is required for covscans as they run on RHEL7 machines. - Drop the license from the doc subpackage to avoid conflicts - [RHEL] Update to upstream version 1.1.5 - [RHEL] Sync with Fedora branch - [RHEL] Apply 'Add missing dependencies to the tests package' - [RHEL] Apply 'Update patch from upstream' - Add missing dependencies to the tests package - Update patch from upstream - [RHEL] Apply 'Build and tests require perl' - CVE-2026-71226: Fix memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path Resolves: RHEL-224809 - CVE-2026-71227: Fix infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return Resolves: RHEL-224975 - CVE-2026-71225: Fix IV reuse in libkcapi one-shot symmetric cipher chunking Resolves: RHEL-224697 - Backport fixes for kcapi-hasher target option Related: RHEL-15300 - Fix kcapi tests in FIPS mode Resolves: RHEL-2406 - Update to new upstream release 1.4.0 Resolves: RHEL-5366 - Add a patch to fix auxiliary tests in FIPS mode Resolves: RHEL-2406 - Add a patch to zeroize kcapi-hasher for FIPS 140-3 Resolves: RHEL-15290 - Add a patch to allow overriding target file in kcapi-hasher Resolves: RHEL-15300 - Fix double free issue in hasher() - [RHEL] Update to upstream version 1.2.0 - Enables building on old kernels [sync fix in Fedora from omosnance]. - This is required for covscans as they run on RHEL7 machines. - Drop the license from the doc subpackage to avoid conflicts - [RHEL] Update to upstream version 1.1.5 - [RHEL] Sync with Fedora branch - [RHEL] Apply 'Add missing dependencies to the tests package' - [RHEL] Apply 'Update patch from upstream' - Add missing dependencies to the tests package - Update patch from upstream - Backport fixes for kcapi-hasher target option Related: RHEL-15300 - Fix kcapi tests in FIPS mode Resolves: RHEL-2406 - Update to new upstream release 1.4.0 Resolves: RHEL-5366 - Add a patch to fix auxiliary tests in FIPS mode Resolves: RHEL-2406 - Add a patch to zeroize kcapi-hasher for FIPS 140-3 Resolves: RHEL-15290 - Add a patch to allow overriding target file in kcapi-hasher Resolves: RHEL-15300 - Fix double free issue in hasher() - [RHEL] Update to upstream version 1.2.0 - Enables building on old kernels [sync fix in Fedora from omosnance]. - This is required for covscans as they run on RHEL7 machines. - Drop the license from the doc subpackage to avoid conflicts - [RHEL] Update to upstream version 1.1.5 - [RHEL] Sync with Fedora branch - [RHEL] Apply 'Add missing dependencies to the tests package' - [RHEL] Apply 'Update patch from upstream' - Add missing dependencies to the tests package - Update patch from upstream - [RHEL] Apply 'Build and tests require perl' - CVE-2026-71226: Fix memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path Resolves: RHEL-224809 - CVE-2026-71227: Fix infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return Resolves: RHEL-224975 - CVE-2026-71225: Fix IV reuse in libkcapi one-shot symmetric cipher chunking Resolves: RHEL-224697 - Backport fixes for kcapi-hasher target option Related: RHEL-15300 - Fix kcapi tests in FIPS mode Resolves: RHEL-2406 - Update to new upstream release 1.4.0 Resolves: RHEL-5366 - Add a patch to fix auxiliary tests in FIPS mode Resolves: RHEL-2406 - Add a patch to zeroize kcapi-hasher for FIPS 140-3 Resolves: RHEL-15290 - Add a patch to allow overriding target file in kcapi-hasher Resolves: RHEL-15300 - Fix double free issue in hasher() - [RHEL] Update to upstream version 1.2.0 - Enables building on old kernels [sync fix in Fedora from omosnance]. - This is required for covscans as they run on RHEL7 machines. - Drop the license from the doc subpackage to avoid conflicts - [RHEL] Update to upstream version 1.1.5 - [RHEL] Sync with Fedora branch - [RHEL] Apply 'Add missing dependencies to the tests package' - [RHEL] Apply 'Update patch from upstream' - Add missing dependencies to the tests package - Update patch from upstream - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Use %autosetup flag '-p1' instead of '-S git' to get rid of git dependency. - Use %license macro in %files section. - Added comment about included patches' upstream status. - Add missing build requirement: gcc. - Add source code patches to facilitate following changes. - Patches managed in git, so add git as another build requirement. - Respect build system compiler flags. - Use %make_build instead of plain make in %build. - Add %check target which performs unattended runtime test. - Use -D install flag instead of manual mkdir. - Initial packaging. - Fix for CVE-2022-47629 (#2161571) - Fix for CVE-2022-3515 (#2135702) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - mark license files as such in the file list (#1418513) - new upstream release fixing minor security issues - new upstream release fixing minor security issues - resolves: RHEL-16509 - Update to libldb-2.8.0 - resolves: rhbz#2190427 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190427 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190427 - Update to version 2.7.2 - resolves: rhbz#2132052 - Update to version 2.6.1 - resolves: rhbz#2108998 - Rebuild to include python3-ldb-devel in CRB - Rebase to version 2.5.2 - resolves: rhbz#2109016 - Fix CVE-2022-32746 - related: rhbz#2077484 - Rebase to version 2.5.1 - resolves: rhbz#2077484 - Rebase to version 2.5.0 - resolves: rhbz#2013605 - Rebase to version 2.4.1 - resolves: RHEL-12109 - Fix performance regression with indexes - resolves: RHEL-16509 - Update to libldb-2.8.0 - resolves: rhbz#2190427 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190427 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190427 - Update to version 2.7.2 - resolves: rhbz#2132052 - Update to version 2.6.1 - resolves: rhbz#2108998 - Rebuild to include python3-ldb-devel in CRB - Rebase to version 2.5.2 - resolves: rhbz#2109016 - Fix CVE-2022-32746 - related: rhbz#2077484 - Rebase to version 2.5.1 - resolves: rhbz#2077484 - Rebase to version 2.5.0 - resolves: RHEL-16509 - Update to libldb-2.8.0 - resolves: rhbz#2190427 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190427 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190427 - Update to version 2.7.2 - resolves: rhbz#2132052 - Update to version 2.6.1 - resolves: rhbz#2108998 - Rebuild to include python3-ldb-devel in CRB - Rebase to version 2.5.2 - resolves: rhbz#2109016 - Fix CVE-2022-32746 - related: rhbz#2077484 - Rebase to version 2.5.1 - resolves: rhbz#2077484 - Rebase to version 2.5.0 - resolves: rhbz#2013605 - Rebase to version 2.4.1 - resolves: RHEL-12109 - Fix performance regression with indexes - resolves: RHEL-16509 - Update to libldb-2.8.0 - resolves: rhbz#2190427 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190427 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190427 - Update to version 2.7.2 - resolves: rhbz#2132052 - Update to version 2.6.1 - resolves: rhbz#2108998 - Rebuild to include python3-ldb-devel in CRB - Rebase to version 2.5.2 - resolves: rhbz#2109016 - Fix CVE-2022-32746 - related: rhbz#2077484 - Rebase to version 2.5.1 - resolves: rhbz#2077484 - Rebase to version 2.5.0 - 2112380 - move liblockfile to BaseOS - update to 1.14 (rhbz#1548753) - fixed build flags injection (rhbz#1548706) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - update to 1.09 - resolve timeout issue (rhbz#1159377) - Update to 1.28.2 - Add Conflicts tag because the bash-completion scripts moved from the main package to the utils sub package causing a file conflict on multilib systems between the old 32 bit main package and the new 64 bit utils sub package. - Upgrade to 1.26.0 release - Update to 1.20.2 release - Update to 1.20.0 release - Regenerate manuals that are broken in dist - A happy little rebuild - Update to 1.18.2 release - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 1.28.2 - Add Conflicts tag because the bash-completion scripts moved from the main package to the utils sub package causing a file conflict on multilib systems between the old 32 bit main package and the new 64 bit utils sub package. - Upgrade to 1.26.0 release - Update to 1.20.2 release - Update to 1.20.0 release - Regenerate manuals that are broken in dist - A happy little rebuild - Update to 1.18.2 release - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Resolves: #1606986 Fix issues found by covscan - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Add cve-2023-27371.patch Related: rhbz#2174639 CVE-2023-27371 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 0.9.59 - Update to 0.9.58 (#1523429) - Add BR graphviz - enable tests - Update to 0.9.57 - Dropped dependency on libgcrypt - Dropped dependency on openssl - Update tarball link to "https:" - Add examples from doc/examples - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Add BR texinfo - Update to 0.9.55 (#1456304) - Update to 0.9.54 (#1447476) - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 1.0.4. - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - fix license handling - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Drop useless dependency on cmake - Trivial fixes in packaging - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for GCC 5 C++11 ABI change - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - 2.13.0 bump (bug #1984402) - 2.12.1 bump (bug #1894573) - Update to 2.9.4 - Drop valgrind tests from RPM build - Resolves: RHBZ#1797749 - Update to versions 2.8.2 and 1.8.16 - Resolves: rhbz#1752511 - Improve default merging logic when dealing with third-party repos - Resolves: rhbz#1761805 - Fix memory corruption error using Module.search_rpms() from python - Speed up valgrind tests - Resolves: rhbz#1714766 - Rebase to 2.5.0 and 1.8.11 - Related: rhbz#1693680 - Rebase to 2.4.0 and 1.8.10 - Resolves: rhbz#1693680 - Don't fail merges when default streams differ - Resolves: rhbz#1666871 - Include modified value when copying Defaults objects - Resolves: rhbz#1665465 - 2.13.0 bump (bug #1984402) - 2.12.1 bump (bug #1894573) - Update to 2.9.4 - Drop valgrind tests from RPM build - Resolves: RHBZ#1797749 - Update to versions 2.8.2 and 1.8.16 - Resolves: rhbz#1752511 - Improve default merging logic when dealing with third-party repos - Resolves: rhbz#1761805 - Fix memory corruption error using Module.search_rpms() from python - Speed up valgrind tests - Resolves: rhbz#1714766 - Rebase to 2.5.0 and 1.8.11 - Related: rhbz#1693680 - Rebase to 2.4.0 and 1.8.10 - Resolves: rhbz#1693680 - Don't fail merges when default streams differ - Resolves: rhbz#1666871 - Include modified value when copying Defaults objects - Resolves: rhbz#1665465 - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - Bump the version number due to conflict with (rhbz 1937721) - Bump the version number due to conflict with (rhbz 1937721) - libndp,ndptool: use poll() instead of select (rhbz 1933041) - ndptool: add -D dest support (rhbz 1697595) - ndptool: fix potential memory leak caused by strdup (rhbz 1697595) - ndptool: add -T target support (rhbz 1666194) - ndptool: fix target parameter typo (rhbz 1666194) - libndp: close sockfd after using to avoid handle leak (rhbz 1666194) - libndp: fix nd_msg typo when setting target address (rhbz 1666194) - Update to 1.7 - libndp: apply filter to raw socket to only accept ND messages - libndp: move ndp_sock_{open,close}() after msg parsing functions - ndptool: Fix compilation on musl libc - Add libndp gating test (rhbz 1682325) - Rebuilt for annocheck fixes (rhbz 1630584) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - libndp: valid route information option length - Bump the version number due to conflict with (rhbz 1937721) - Bump the version number due to conflict with (rhbz 1937721) - libndp,ndptool: use poll() instead of select (rhbz 1933041) - ndptool: add -D dest support (rhbz 1697595) - ndptool: fix potential memory leak caused by strdup (rhbz 1697595) - ndptool: add -T target support (rhbz 1666194) - ndptool: fix target parameter typo (rhbz 1666194) - libndp: close sockfd after using to avoid handle leak (rhbz 1666194) - libndp: fix nd_msg typo when setting target address (rhbz 1666194) - Update to 1.7 - libndp: apply filter to raw socket to only accept ND messages - libndp: move ndp_sock_{open,close}() after msg parsing functions - ndptool: Fix compilation on musl libc - Add libndp gating test (rhbz 1682325) - Rebuilt for annocheck fixes (rhbz 1630584) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Updated to 1.0.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - fix license handling - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuild for added CI tests - Add missing backports from upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - Add missing fixmanpages.sh script - Allow for and explicitly disable doxygen docs - No need to drop internal.h, it is no longer installed. - Rebase onto version 1.0.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - fix license handling - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Covscan Scan: Wrong Check of Return Value (bz 2151966) - Covscan Scan: Clang (experimental) (bz 2151971) - mountd: Check 'nfsd/clients' directory presence (bz 2123073) - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2100395) - rpcctl: 'PosixPath' object has no attribute 'readlink' (bz 2087187) - rpcctl: Remove subparser required option as that was added in py3.7 (bz 2087187) - Create the nfsrahead command (bz 1946283) - rpcctl: Add a rpcctl.py tool (bz 2087187) - manpage: Add a description of the softreval/nosoftreval (bz 2073476) - libnfsidmap: Turn off default verbosity (bz 2057612) - mount.nfs: Fix Typo auto negotiating code. (bz 1946346) - update rdirplus documentation on nfs(5) man page (RHEL-91253) - mountstats fixes (RHEL-90242) - nfsiostat fixes (RHEL-90242) - gssd: unconditionally use krb5_get_init_creds_opt_alloc (RHEL-62422) - gssd: do not use krb5_cc_initialize (RHEL-62422) - gssd.man: add documentation for use-gss-proxy (RHEL-13085) - Covscan Scan: Wrong Check of Return Value (bz 2151966) - Covscan Scan: Clang (experimental) (bz 2151971) - mountd: Check 'nfsd/clients' directory presence (bz 2123073) - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2100395) - rpcctl: 'PosixPath' object has no attribute 'readlink' (bz 2087187) - rpcctl: Remove subparser required option as that was added in py3.7 (bz 2087187) - Add requires for selinux-policy (RHEL-127095) - mountd: Minor refactor of get_rootfh() (RHEL-127095) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127095) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127095) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127095) Resolves: CVE-2025-12801 - gssd: protect kerberos ticket cache access (RHEL-103627) - nfsrahead: modify get_device_info logic (RHEL-108924) - update rdirplus documentation on nfs(5) man page (RHEL-91253) - mountstats fixes (RHEL-90242) - nfsiostat fixes (RHEL-90242) - gssd: unconditionally use krb5_get_init_creds_opt_alloc (RHEL-62422) - gssd: do not use krb5_cc_initialize (RHEL-62422) - gssd.man: add documentation for use-gss-proxy (RHEL-13085) - Covscan Scan: Wrong Check of Return Value (bz 2151966) - Covscan Scan: Clang (experimental) (bz 2151971) - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-150760) - nfsrahead: zero-initialise device_info struct (RHEL-150760) - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-150760) - Add requires for selinux-policy (RHEL-127095) - mountd: Minor refactor of get_rootfh() (RHEL-127095) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127095) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127095) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127095) Resolves: CVE-2025-12801 - gssd: protect kerberos ticket cache access (RHEL-103627) - nfsrahead: modify get_device_info logic (RHEL-108924) - update rdirplus documentation on nfs(5) man page (RHEL-91253) - mountstats fixes (RHEL-90242) - nfsiostat fixes (RHEL-90242) - gssd: unconditionally use krb5_get_init_creds_opt_alloc (RHEL-62422) - gssd: do not use krb5_cc_initialize (RHEL-62422) - gssd.man: add documentation for use-gss-proxy (RHEL-13085) - Export nftnl_set_elem_nlmsg_build symbol in the right version - libnftnl.map: Restore custom LIBNFTNL_RHEL_14 version (Phil Sutter) [2211096] - Rebase onto version 1.2.2 (Phil Sutter) [2211096] - set: expose nftnl_set_elem_nlmsg_build() (Phil Sutter) [2040754] - expr: dynset: release stateful expression from .free path (Phil Sutter) [2040478] - set_elem: missing set and build for NFTNL_SET_ELEM_EXPR (Phil Sutter) [2040478] - src: Fix for reading garbage in nftnl_chain getters (Phil Sutter) [1758673] - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223] - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223] - include: resync nf_tables.h cache copy (Phil Sutter) [1795223] - chain: Correctly check realloc() call (Phil Sutter) [1778952] - flowtable: Correctly check realloc() call (Phil Sutter) [1778952] - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952] - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952] - Rebase onto upstream version 1.1.5 (Phil Sutter) [1717129] - set: Export nftnl_set_list_lookup_byname() (Phil Sutter) [1762563] - obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser (Phil Sutter) [1758673] - set_elem: Validate nftnl_set_elem_set() parameters (Phil Sutter) [1758673] - obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() (Phil Sutter) [1758673] - set: Don't bypass checks in nftnl_set_set_u{32,64}() (Phil Sutter) [1758673] - obj/tunnel: Fix for undefined behaviour (Phil Sutter) [1758673] - set_elem: Fix return code of nftnl_set_elem_set() (Phil Sutter) [1758673] - obj: ct_timeout: Check return code of mnl_attr_parse_nested() (Phil Sutter) [1758673] - fix HTTP/2 Rapid Reset (CVE-2023-44487) - prevent DoS caused by overly large SETTINGS frames (CVE-2020-11080) - rebuild to trigger gating (#1681044) - backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513) - use python3 for build - update to the latest upstream release (#1636992) - update to the latest upstream release - update to the latest upstream release (fixes CVE-2018-1000168) - make fetch-ocsp-response use Python 3 - update to the latest upstream release - add explicit BR for the gcc-c++ compiler - fix CONTINUATION frames DoS (CVE-2024-27316) - fix CONTINUATION frames DoS (CVE-2024-28182) - fix HTTP/2 Rapid Reset (CVE-2023-44487) - prevent DoS caused by overly large SETTINGS frames (CVE-2020-11080) - rebuild to trigger gating (#1681044) - backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513) - use python3 for build - update to the latest upstream release (#1636992) - update to the latest upstream release - update to the latest upstream release (fixes CVE-2018-1000168) - make fetch-ocsp-response use Python 3 - fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135) - fix CONTINUATION frames DoS (CVE-2024-27316) - fix CONTINUATION frames DoS (CVE-2024-28182) - fix HTTP/2 Rapid Reset (CVE-2023-44487) - prevent DoS caused by overly large SETTINGS frames (CVE-2020-11080) - rebuild to trigger gating (#1681044) - backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513) - use python3 for build - update to the latest upstream release (#1636992) - update to the latest upstream release - update to the latest upstream release (fixes CVE-2018-1000168) - fix HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests (CVE-2026-58055) - fix Denial of service: Assertion failure due to the missing state validation (CVE-2026-27135) - fix CONTINUATION frames DoS (CVE-2024-27316) - fix CONTINUATION frames DoS (CVE-2024-28182) - fix HTTP/2 Rapid Reset (CVE-2023-44487) - prevent DoS caused by overly large SETTINGS frames (CVE-2020-11080) - rebuild to trigger gating (#1681044) - backport security fixes from nghttp2-1.39.2 (CVE-2019-9511 and CVE-2019-9513) - use python3 for build - update to the latest upstream release (#1636992) - update to the latest upstream release - Update to 3.7.0 (rh #2078874) - Update to 3.5.0 - Fix issues found by coverity (rh #1606988) - Conditionalize the Python 2 subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Update to 3.4.0 - Update to 3.4.0-rc1 - Python 2 binary package renamed to python2-libnl3 See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Update to 3.7.0 (rh #2078874) - Update to 3.5.0 - Fix issues found by coverity (rh #1606988) - Conditionalize the Python 2 subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Update to 3.4.0 - Update to 3.4.0-rc1 - Python 2 binary package renamed to python2-libnl3 See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Update to 3.7.0 (rh #2078874) - Update to 3.5.0 - Fix issues found by coverity (rh #1606988) - Conditionalize the Python 2 subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Update to 3.4.0 - Update to 3.4.0-rc1 - Python 2 binary package renamed to python2-libnl3 See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Update to 3.7.0 (rh #2078874) - Update to 3.5.0 - Fix issues found by coverity (rh #1606988) - Conditionalize the Python 2 subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Update to 3.4.0 - Update to 3.4.0-rc1 - Python 2 binary package renamed to python2-libnl3 See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Update to 1.2.0-2.20181605git4a062cf Resolves: rhbz#1573895 - Update to version 1.2.0 - Change libdir and includedir - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to version 1.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to version 1.0.5 - Fix missing stdint.h - Initial version for 1.0.4 - Resolves: rhbz#2048668 - Request to add libdhash-devel package into CRB - Resolves: rhbz#1611714 - [RHEL8-S-BUILD] ding-libs Fails Scratch Build on rhel-8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - INI: Remove definiton of TRACE_LEVEL - INI: Silence ini_augment match failures - New upstream release 0.6.1 - Backport INI merge detection support - Migrate to autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Resolves: #1743650 - Enable inbox support for sniffing offloaded RDMA traffic with tcpdump - Related: #1806422 - Building libpcap to side-tag for tcpdump - Related: #1743650 - reverting rdma changes due to unresolved dependency loop - Related: #1806422 - Building libpcap to side-tag for tcpdump - Resolves: #1806422 - rebase libpcap to version 1.9.1 - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning - Resolves: #1792208 - Resource exhaustion while PHB header length validation - Resolves: #1708397 - Move libpcap.pc to libpcap-devel - Removing obsolete group tag - Resolves: #1680929 - libpcap changes blocked until gating tests are added - New version 1.9.0 - Adding support for AF_VSOCK (rhbz#1587833) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Fix CVE-2026-0799: add bounds checks for BPF scratch memory register indices in the BPF interpreter - Resolves: RHEL-256926 - Resolves: #1743650 - Enable inbox support for sniffing offloaded RDMA traffic with tcpdump - Related: #1806422 - Building libpcap to side-tag for tcpdump - Related: #1743650 - reverting rdma changes due to unresolved dependency loop - Related: #1806422 - Building libpcap to side-tag for tcpdump - Resolves: #1806422 - rebase libpcap to version 1.9.1 - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning - Resolves: #1792208 - Resource exhaustion while PHB header length validation - Resolves: #1708397 - Move libpcap.pc to libpcap-devel - Removing obsolete group tag - Resolves: #1680929 - libpcap changes blocked until gating tests are added - New version 1.9.0 - Adding support for AF_VSOCK (rhbz#1587833) - libpciaccess 0.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - libpciaccess 0.13.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild + libpeas-1.22.0-6 - Remove python2 loader, all GNOME apps using libpeas were ported to Python3 when ported to GTK+ 3.x, and obsolete libpeas-loader-python - Resolves: #1559090 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Remove obsolete scriptlets - Cleanup spec file conditionals - Update to 1.22.0 - Update to 1.21.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 1.21.0 git snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 1.5.0 resolves #1512903 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - update to 1.4.2 resolves #1469102 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - updated to 1.4.1 resolves #1256154 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - updated to 1.4.0 resolves: #1157461 - Update to 1.4.2 - Drop conditionals for old Fedora releases - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 1.4.1 - Move pc(5) manpage to main pkgconf package - Update to 1.4.0 - Add simple wrapper to support platform-specific pkg-config paths (#1513810) - Update to 1.3.90 - Update to 1.3.12 - Update to 1.3.10 - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148338) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148852) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146659) - CVE-2025-64720: buffer overflow (RHEL-131452) - CVE-2025-65018: heap buffer overflow (RHEL-131465) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133226) - Remove redundant fix for CVE-2017-12652 - Add upstream test suite and enable it in gating - Fix CVE-2017-12652 (#1744871) - Fix important Covscan defects (#1602588) - Fix CVE-2018-13785 (#1599952) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - New upstream release 1.6.34 - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161344) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148338) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148852) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146659) - CVE-2025-64720: buffer overflow (RHEL-131452) - CVE-2025-65018: heap buffer overflow (RHEL-131465) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133226) - Remove redundant fix for CVE-2017-12652 - Add upstream test suite and enable it in gating - Fix CVE-2017-12652 (#1744871) - Fix important Covscan defects (#1602588) - Fix CVE-2018-13785 (#1599952) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Fix important Covscan defects (#1602588) - Fix CVE-2018-13785 (#1599952) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - New upstream release 1.6.34 - New upstream release 1.6.31 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New upstream release 1.6.29 - Update source URL (#1458040) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2025-64720: buffer overflow (RHEL-131452) - CVE-2025-65018: heap buffer overflow (RHEL-131465) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133226) - Remove redundant fix for CVE-2017-12652 - Add upstream test suite and enable it in gating - Fix CVE-2017-12652 (#1744871) - Fix important Covscan defects (#1602588) - Fix CVE-2018-13785 (#1599952) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - New upstream release 1.6.34 - New upstream release 1.6.31 - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148338) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148852) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146659) - CVE-2025-64720: buffer overflow (RHEL-131452) - CVE-2025-65018: heap buffer overflow (RHEL-131465) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133226) - Remove redundant fix for CVE-2017-12652 - Add upstream test suite and enable it in gating - Fix CVE-2017-12652 (#1744871) - Fix important Covscan defects (#1602588) - Fix CVE-2018-13785 (#1599952) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - New upstream release 1.6.34 - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161344) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148338) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148852) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-146659) - CVE-2025-64720: buffer overflow (RHEL-131452) - CVE-2025-65018: heap buffer overflow (RHEL-131465) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133226) - Remove redundant fix for CVE-2017-12652 - Add upstream test suite and enable it in gating - Fix CVE-2017-12652 (#1744871) - Fix important Covscan defects (#1602588) - Fix CVE-2018-13785 (#1599952) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Fix important Covscan defects (#1602588) - Fix CVE-2018-13785 (#1599952) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - New upstream release 1.6.34 - New upstream release 1.6.31 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New upstream release 1.6.29 - Update source URL (#1458040) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - CVE-2025-64720: buffer overflow (RHEL-131452) - CVE-2025-65018: heap buffer overflow (RHEL-131465) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133226) - Remove redundant fix for CVE-2017-12652 - Add upstream test suite and enable it in gating - Fix CVE-2017-12652 (#1744871) - Fix important Covscan defects (#1602588) - Fix CVE-2018-13785 (#1599952) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - New upstream release 1.6.34 - New upstream release 1.6.31 - Drop pacrunner-mozjs (#1571640) - Drop python2 subpackage (#1559092) - Drop PAC runner based on the "pacrunner" package (#1569023) - Replace pacrunner-crash-fix patch with version from RHEL7 - Drop kde subpackage (#1538147) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Use pkgconfig for BuildRequires - Fix crash in pacrunner module (#1459779) - Update to 0.4.15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.4.14 - Update to 0.4.13 - Bump up version number - Fix PAC buffer overflow (#1869639) - Fix CVE-2020-25219 (#1880349) - Drop pacrunner-mozjs (#1571640) - Drop python2 subpackage (#1559092) - Drop PAC runner based on the "pacrunner" package (#1569023) - Replace pacrunner-crash-fix patch with version from RHEL7 - Drop kde subpackage (#1538147) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Use pkgconfig for BuildRequires - Fix crash in pacrunner module (#1459779) - Update to 0.4.15 - increase release number (#1764048) - avoid using rpath in the psl executable (#1533448) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Rebuilt for Python 3.7 - Rebuilt for publicsuffix-list 20180514 - Update to 0.20.2 (#1572887) - Update to 0.20.1 (#1548604) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - new version (#1511463) - rebuilt - rebuilt - Japan translation update (remove extra dot) Resolves: rhbz#2122609 - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement [updated] - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement - Translation updates - Add usersubstr check for substrings of N characters from the username patch by Danny Sauer - pam_pwquality: Abort the retry loop if user requests it - Allow setting retry, enforce_for_root, and local_users_only options in the pwquality.conf config file - Fix an issue found in Coverity scan - Properly conditionalize the python buildrequires - Add conditionals for Python2 and Python3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild ipc: Retry receiving credentials if the the message is short Resolves: rhbz#2151300 Correctly set socket directory permissions when qb_ipcs_connection_auth_set() is called Resolves: rhbz#1836146 Avoid deadlock in IPC connections Resolves: rhbz#1718773 Improve security of SHM files used for IPCs Resolves: rhbz#1714854 - Add RHEL-8.1 gating tests Resolves: rhbz#1682119 - Remove linker magic in the logging code. Resolves: rhbz#1615945 - Rebuild with fixed binutils - Rebuild with newer binutils (hopefully to fix pacemaker/corosync linkage issue) - Rebuild to fix GCC 8 mis-compilation See https://da.gd/YJVwk ("GCC 8 ABI change on x86_64") - Escape macros in %changelog ipc: Retry receiving credentials if the the message is short Resolves: rhbz#2151300 Correctly set socket directory permissions when qb_ipcs_connection_auth_set() is called Resolves: rhbz#1836146 Avoid deadlock in IPC connections Resolves: rhbz#1718773 Improve security of SHM files used for IPCs Resolves: rhbz#1714854 - Add RHEL-8.1 gating tests Resolves: rhbz#1682119 - Remove linker magic in the logging code. Resolves: rhbz#1615945 - Rebuild with fixed binutils - Rebuild with newer binutils (hopefully to fix pacemaker/corosync linkage issue) - Rebuild to fix GCC 8 mis-compilation See https://da.gd/YJVwk ("GCC 8 ABI change on x86_64") - Escape macros in %changelog - Update to 1.32.2 - Build without QRTR - Upgrade to 1.30.2 - fix crash in qmi_endpoint_is_open() (rh #1976888) - fix crash and detect QMI port over smdpkt subsystem (rh #1976886) - Update to 1.24.0 - Update to 1.22.4 - Change to Python 3 as a build dependency - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 1.18.0 - Update to 1.32.2 - Build without QRTR - Upgrade to 1.30.2 - fix crash in qmi_endpoint_is_open() (rh #1976888) - fix crash and detect QMI port over smdpkt subsystem (rh #1976886) - Update to 1.24.0 - Update to 1.22.4 - Change to Python 3 as a build dependency - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 1.18.0 - Bump release - Resolves: #2215765, insecure credentials submission - Resolves: #1857831, rpmdiff - Resolves: #1809992, CVE-2019-18609 - update to 0.9.0 - missing BR on C compiler - drop ldconfig scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - CVE-2026-44236 librabbitmq: rabbitmq-c: Heap buffer overflow leading to denial of service [rhel-8.10.z] leading to denial of service [rhel-8.10.z] - Resolves: RHEL-266743 - Resolves: RHEL-16230, rebuild for adding librabbitmq-tools - Resolves: #2215765, insecure credentials submission - Resolves: #1857831, rpmdiff - Resolves: #1809992, CVE-2019-18609 - update to 0.9.0 - missing BR on C compiler - drop ldconfig scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Resolves: rhbz#2048668 - Request to add libdhash-devel package into CRB - Resolves: rhbz#1611714 - [RHEL8-S-BUILD] ding-libs Fails Scratch Build on rhel-8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - INI: Remove definiton of TRACE_LEVEL - INI: Silence ini_augment match failures - New upstream release 0.6.1 - Backport INI merge detection support - Migrate to autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Set default SELinux labels on GnuPG directories (RHEL-10720) - Fix termination of va_list in lr_metadatatarget_append_error() - Detailed error message when using non-existing TMPDIR - Fix covscan issues - Use nanosec precision for timestamp of checksum cache - Update to 1.14.2 - Reduce time to load metadata - Fix resource leaks and memory leaks - Remove build dependency on python3-flask - Recover from fsync fail on read-only filesystem (RhBug:1956361) - Update to 1.14.0 - Fix the key string parsing in url_substitution - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706) - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383) - Fix: lr_perform() - Avoid 100% CPU usage - Add support for working with certificates used with proxy - Reposync does not re-download unchanged packages (RhBug:1931904) - Fix memory leaks - Add support for pkcs11 certificate and key for repository authorization (RhBug:1859495) - Validate paths read from repomd.xml (RhBug:1866505) - Update to 1.12.0 - Decode package URL when using for local filename (RhBug:1817130) - Fix memory leak in lr_download_metadata() and lr_yum_download_remote() - Download sources work when at least one of specified is working (RhBug:1775184) - Enable building on OSX - Add support for AlmaLinux Bug Tracker - Remove libreport-plugin-rhtsupport and libreport-rhel - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - Add patch for rhbz#1867064 - Add patch for #1860285 - Add patch for #1848903 - Resolves: rhbz#1835388 - abrt-addon-ccpp causes failures during openscap scans on CCE-27119-7 - This is just libreport side (abrt also needs to be patched) - Add patch for #1822092 - reportclient: Search for required packages recursively - reportclient: Find and download required debuginfo packages - report-client: Find debuginfos in own method - Resolves: rhbz#1783897 - lib: fix a SEGV in list_possible_events() - Resolves: rhbz#1733515 - Uncomment some patches for Coverity issues - bugzilla: change the default bugzilla group - tests: Disable strcpm'ing a freed pointer - Add autogen.sh - Resolves #1660449 - Append ctx_baseurl prefix to gpg_url - Rebuild to ship also librhsm-devel subpackage - Generate repofile for any architecture if "ALL" is specified - Enable repos when generating a .repo file based on entitlement certificate. - Update to 0.0.3 - Initial release - rebase to 2.5.2 resolves: rhbz#2019893 - rebase to 2.5.1 resolves: rhbz#1927635 - rebase to upstream version 2.4.3 resolves: rhbz#1770693 resolves: rhbz#1768583 - rebase to 2.4.1 - spec: make the check phase conditional - Honor %{valgrind_arches} - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream version - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 0.18.6 - Use valgrind_arches macro instead of hardcoding valgrind arch list - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - BR vala instead of obsolete vala-tools subpackage - Update to 0.18.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Update to 0.18.4 - Update to 0.18.6 - Use valgrind_arches macro instead of hardcoding valgrind arch list - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - BR vala instead of obsolete vala-tools subpackage - Update to 0.18.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Update to 0.18.4 - Close old selabel handle when setting a new one (RHEL-73348) - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252) - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Ignore files removed during relabeling (RHEL-123885) - Close old selabel handle when setting a new one (RHEL-73348) - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252) - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK coverity scan defects - selinux_restorecon: Skip customized files also without -v - man pages fixes - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK coverity scan defects - Close old selabel handle when setting a new one (RHEL-73348) - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252) - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Ignore files removed during relabeling (RHEL-123885) - Close old selabel handle when setting a new one (RHEL-73348) - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252) - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK coverity scan defects - selinux_restorecon: Skip customized files also without -v - man pages fixes - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK coverity scan defects - Close old selabel handle when setting a new one (RHEL-73348) - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252) - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Ignore files removed during relabeling (RHEL-123885) - Close old selabel handle when setting a new one (RHEL-73348) - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252) - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK coverity scan defects - selinux_restorecon: Skip customized files also without -v - man pages fixes - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK coverity scan defects - Preserve file context and ownership in policy store (RHEL-17509) - allow spaces in user/group names (#2042408) - always write kernel policy when check_ext_changes is specified (#2089802) - Bump release to get around OSCI issues - Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186) - sync filesystem with sandbox (#1913224) - Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786) - genhomedircon: check usepasswd (rhbz#1871786) - Fsync final files before rename (#1838762) - Add support for DCCP and SCTP protocols (#1563742) - SELinux userspace 2.9 release - Set new restorecon handle before doing restorecon (RHEL-73348) - Mute error messages from selinux_restorecon - Preserve file context and ownership in policy store (RHEL-17509) - allow spaces in user/group names (#2042408) - always write kernel policy when check_ext_changes is specified (#2089802) - Bump release to get around OSCI issues - Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186) - sync filesystem with sandbox (#1913224) - Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786) - genhomedircon: check usepasswd (rhbz#1871786) - Fsync final files before rename (#1838762) - Add support for DCCP and SCTP protocols (#1563742) - improve performance of semanage store rebuild (RHEL-86057) - Set new restorecon handle before doing restorecon (RHEL-73348) - Mute error messages from selinux_restorecon - Preserve file context and ownership in policy store (RHEL-17509) - allow spaces in user/group names (#2042408) - always write kernel policy when check_ext_changes is specified (#2089802) - Bump release to get around OSCI issues - Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186) - sync filesystem with sandbox (#1913224) - Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786) - genhomedircon: check usepasswd (rhbz#1871786) - Fsync final files before rename (#1838762) - always write kernel policy when check_ext_changes is specified (#2129139) - Bump release to get around OSCI issues - Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186) - sync filesystem with sandbox (#1913224) - Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786) - genhomedircon: check usepasswd (rhbz#1871786) - Fsync final files before rename (#1838762) - Add support for DCCP and SCTP protocols (#1563742) - SELinux userspace 2.9 release - genhomedircon - improve handling large groups - cil: Fix out-of-bound read of file context pattern ending with "\" - cil: Destroy classperms list when resetting classpermission (#1983517) - cil: Destroy classperm list when resetting map perms (#1983521) - cil: cil_reset_classperms_set() should not reset classpermission (#1983525) - cil: Set class field to NULL when resetting struct cil_classperms - cil: More strict verification of constraint leaf expressions - cil: Exit with an error if declaration name is a reserved word - cil: Allow permission expressions when using map classes - cil: Reorder checks for invalid rules when building AST - cil: Cleanup build AST helper functions - cil: Create new first child helper function for building AST - cil: Remove unused field from struct cil_args_resolve - cil: Destroy disabled optional blocks after pass is complete - cil: Check if name is a macro parameter first - cil: fix NULL pointer dereference in __cil_insert_name - cil: Report disabling an optional block only at high verbose levels - cil: Use AST to track blocks and optionals when resolving - cil: Reorder checks for invalid rules when resolving AST - cil: Sync checks for invalid rules in booleanifs - cil: Check for statements not allowed in optional blocks (#1983530) - Drop unnecessary telinit (#1838257) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK coverity scan defects - SELinux userspace 2.8 release - SELinux userspace 2.8-rc1 release candidate - SELinux userspace 2.8-rc1 release candidate - Prevent freeing unitialized value in ibendport handling - Add support for the SCTP portcon keyword - Export sepol_polcap_getnum/name functions - cil: Create new keep field for type attribute sets - build: follow standard semantics for DESTDIR and PREFIX - cil: show an error when cil_expr_to_string() fails - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - cil: Fix out-of-bound read of file context pattern ending with "\" - cil: Destroy classperms list when resetting classpermission (#1983517) - cil: Destroy classperm list when resetting map perms (#1983521) - cil: cil_reset_classperms_set() should not reset classpermission (#1983525) - cil: Set class field to NULL when resetting struct cil_classperms - cil: More strict verification of constraint leaf expressions - cil: Exit with an error if declaration name is a reserved word - cil: Allow permission expressions when using map classes - cil: Reorder checks for invalid rules when building AST - cil: Cleanup build AST helper functions - cil: Create new first child helper function for building AST - cil: Remove unused field from struct cil_args_resolve - cil: Destroy disabled optional blocks after pass is complete - cil: Check if name is a macro parameter first - cil: fix NULL pointer dereference in __cil_insert_name - cil: Report disabling an optional block only at high verbose levels - cil: Use AST to track blocks and optionals when resolving - cil: Reorder checks for invalid rules when resolving AST - cil: Sync checks for invalid rules in booleanifs - cil: Check for statements not allowed in optional blocks (#1983530) - Drop unnecessary telinit (#1838257) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK coverity scan defects - SELinux userspace 2.8 release - SELinux userspace 2.8-rc1 release candidate - SELinux userspace 2.8-rc1 release candidate - Prevent freeing unitialized value in ibendport handling - Add support for the SCTP portcon keyword - Export sepol_polcap_getnum/name functions - cil: Create new keep field for type attribute sets - build: follow standard semantics for DESTDIR and PREFIX - cil: show an error when cil_expr_to_string() fails - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - libsigsegv-2.11 (#1425639) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - .spec cleanup, update URL, use %license (#1418517) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - Backport Allow to break arch lock-step on erase operations (RhBug:2172288,2172292) - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep (RhBug:2185061,2190136) - Drop patch to fix pick of old build (RhBug:2150300,RhBug:2151551) - Allow accessing toolversion at runtime and increase it - Add support for storing user data in a solv file - Improve choice rule generation - Update to 0.7.20 - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies - support for environments in comps parser - fix misparsing of '&' in attributes with libxml2 - choice rules: treat orphaned packages as newest - fix compatibility with Python 3.10 - Update to 0.7.19 - repo_add_conda: add flag to skip v2 packages - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt - fix error handling in solv_xfopen_fd() - fix memory leaks - Fix rpm dependency - Update to 0.7.17 - selected bug fixes: * repo_write: fix handling of nested flexarray * improve choicerule generation a bit more to cover more cases * harden testcase parser against repos being added too late * support python-3.10 * check /var/lib/rpm macro in rpmdb code - new features: * handle default/visible/langonly attributes in comps parser * support multiple collections in updateinfo parser * add '-D' option in rpmdb2solv to set the dbpath - Enable zstd compression in libsolv - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178970) - Backport Allow to break arch lock-step on erase operations (RhBug:2172288,2172292) - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep (RhBug:2185061,2190136) - Drop patch to fix pick of old build (RhBug:2150300,RhBug:2151551) - Allow accessing toolversion at runtime and increase it - Add support for storing user data in a solv file - Improve choice rule generation - Update to 0.7.20 - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies - support for environments in comps parser - fix misparsing of '&' in attributes with libxml2 - choice rules: treat orphaned packages as newest - fix compatibility with Python 3.10 - Update to 0.7.19 - repo_add_conda: add flag to skip v2 packages - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt - fix error handling in solv_xfopen_fd() - fix memory leaks - Fix rpm dependency - Update to 0.7.17 - selected bug fixes: * repo_write: fix handling of nested flexarray * improve choicerule generation a bit more to cover more cases * harden testcase parser against repos being added too late * support python-3.10 * check /var/lib/rpm macro in rpmdb code - new features: * handle default/visible/langonly attributes in comps parser * support multiple collections in updateinfo parser * add '-D' option in rpmdb2solv to set the dbpath - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Add patches to improve test reliability - Backport patches for various CVEs Resolves: RHEL-85879 Resolves: RHEL-92280 Resolves: RHEL-93031 Resolves: RHEL-93032 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85887 Resolves: RHEL-85900 Resolves: RHEL-85901 Resolves: RHEL-87039 Resolves: RHEL-87094 Resolves: RHEL-87114 Resolves: RHEL-88348 Resolves: RHEL-88351 - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76376 - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Resolves: RHEL-67076 - Resolves: RHEL-67067 - Resolves: RHEL-2240 (Correct BuildRequires for python3) - Resolves: #2203398 (WebSocket server asserts when a client is closing the connection) - Resolves: #1938011 (Support for NTLMv2 Authentication) - Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270) - Update to 2.62.3 - Backport patch for CVE-2025-14523 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Add patches to improve test reliability - Backport patches for various CVEs Resolves: RHEL-85879 Resolves: RHEL-92280 Resolves: RHEL-93031 Resolves: RHEL-93032 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85887 Resolves: RHEL-85900 Resolves: RHEL-85901 Resolves: RHEL-87039 Resolves: RHEL-87094 Resolves: RHEL-87114 Resolves: RHEL-88348 Resolves: RHEL-88351 - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76376 - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Resolves: RHEL-67076 - Resolves: RHEL-67067 - Resolves: RHEL-2240 (Correct BuildRequires for python3) - Resolves: #2203398 (WebSocket server asserts when a client is closing the connection) - Resolves: #1938011 (Support for NTLMv2 Authentication) - Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270) - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2025-14523 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Add patches to improve test reliability - Backport patches for various CVEs Resolves: RHEL-85879 Resolves: RHEL-92280 Resolves: RHEL-93031 Resolves: RHEL-93032 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85887 Resolves: RHEL-85900 Resolves: RHEL-85901 Resolves: RHEL-87039 Resolves: RHEL-87094 Resolves: RHEL-87114 Resolves: RHEL-88348 Resolves: RHEL-88351 - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76376 - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Resolves: RHEL-67076 - Resolves: RHEL-67067 - Resolves: RHEL-2240 (Correct BuildRequires for python3) - Resolves: #2203398 (WebSocket server asserts when a client is closing the connection) - Backport patch for CVE-2026-5119 - Run testsuite during RPM check phase - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2025-14523 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Add patches to improve test reliability - Backport patches for various CVEs Resolves: RHEL-85879 Resolves: RHEL-92280 Resolves: RHEL-93031 Resolves: RHEL-93032 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85887 Resolves: RHEL-85900 Resolves: RHEL-85901 Resolves: RHEL-87039 Resolves: RHEL-87094 Resolves: RHEL-87114 Resolves: RHEL-88348 Resolves: RHEL-88351 - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76376 - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Resolves: RHEL-67076 - Resolves: RHEL-67067 - Resolves: RHEL-2240 (Correct BuildRequires for python3) - Backport patch for CVE-2026-15711 - Backport patch for CVE-2026-5119 - Run testsuite during RPM check phase - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2025-14523 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Add patches to improve test reliability - Backport patches for various CVEs Resolves: RHEL-85879 Resolves: RHEL-92280 Resolves: RHEL-93031 Resolves: RHEL-93032 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85887 Resolves: RHEL-85900 Resolves: RHEL-85901 Resolves: RHEL-87039 Resolves: RHEL-87094 Resolves: RHEL-87114 Resolves: RHEL-88348 Resolves: RHEL-88351 - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76376 - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Resolves: RHEL-67076 - Resolves: RHEL-67067 - CVE-2026-102557 libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly - CVE-2026-102558 libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth - CVE-2026-102556 libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion - CVE-2026-102559 libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking client-frame masking - Backport patch for CVE-2026-15711 - Backport patch for CVE-2026-5119 - Run testsuite during RPM check phase - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2025-14523 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Resolves: RHEL-2240 (Correct BuildRequires for python3) - Resolves: #2203398 (WebSocket server asserts when a client is closing the connection) - Resolves: #1938011 (Support for NTLMv2 Authentication) - Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270) - Update to 2.62.3 - Address some of the Coverity Scan and clang issues - Update to 2.62.2 - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames - Update to 2.62.1 - Update to 2.62.0 - Update to 2.61.91 - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Backport upstream patch for CVE-2024-52530 - infinite loop while reading websocket data - Resolves: RHEL-67076 - Resolves: RHEL-67067 - Resolves: RHEL-2240 (Correct BuildRequires for python3) - Resolves: #2203398 (WebSocket server asserts when a client is closing the connection) - Resolves: #1938011 (Support for NTLMv2 Authentication) - Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270) - Update to 2.62.3 - Address some of the Coverity Scan and clang issues - Update to 2.62.2 - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames - Update to 2.62.1 - Update to 2.62.0 - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76376 - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Resolves: RHEL-67076 - Resolves: RHEL-67067 - Resolves: RHEL-2240 (Correct BuildRequires for python3) - Resolves: #2203398 (WebSocket server asserts when a client is closing the connection) - Resolves: #1938011 (Support for NTLMv2 Authentication) - Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270) - Update to 2.62.3 - Address some of the Coverity Scan and clang issues - Update to 2.62.2 - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames - Update to 2.62.1 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85887 Resolves: RHEL-85900 Resolves: RHEL-85901 Resolves: RHEL-87039 Resolves: RHEL-87094 Resolves: RHEL-87114 Resolves: RHEL-88348 Resolves: RHEL-88351 - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76376 - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Resolves: RHEL-67076 - Resolves: RHEL-67067 - Resolves: RHEL-2240 (Correct BuildRequires for python3) - Resolves: #2203398 (WebSocket server asserts when a client is closing the connection) - Resolves: #1938011 (Support for NTLMv2 Authentication) - Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270) - Update to 2.62.3 - Address some of the Coverity Scan and clang issues - Update to 2.62.2 - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames - Add patches to improve test reliability - Backport patches for various CVEs Resolves: RHEL-85879 Resolves: RHEL-92280 Resolves: RHEL-93031 Resolves: RHEL-93032 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85887 Resolves: RHEL-85900 Resolves: RHEL-85901 Resolves: RHEL-87039 Resolves: RHEL-87094 Resolves: RHEL-87114 Resolves: RHEL-88348 Resolves: RHEL-88351 - Backport upstream patch for CVE-2024-52531 - buffer overflow via UTF-8 conversion in soup_header_parse_param_list_strict Resolves: RHEL-76376 - Backport upstream patch for CVE-2024-52530 - HTTP request smuggling via stripping null bytes from the ends of header names - Backport upstream patch for CVE-2024-52532 - infinite loop while reading websocket data - Resolves: RHEL-67076 - Resolves: RHEL-67067 - Resolves: RHEL-2240 (Correct BuildRequires for python3) - Resolves: #2203398 (WebSocket server asserts when a client is closing the connection) - Resolves: #1938011 (Support for NTLMv2 Authentication) - Some WebSocket fixes to unbreak cockpit-desktop (rhbz#1872270) - Update to 2.62.3 - Address some of the Coverity Scan and clang issues - Build and package e2scrub package - remove e2fsprogs-1.45.6-Makefile.in-Disable-e2scrub.patch - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Backport fixes from 1.45.2 (#1714927) - Fix errors in rpmdiff (#1714923) - libext2fs: fix unix_io's Direct I/O support - Related: RHEL-106939 - Fix e2fsprogs: online resize fails - Related: RHEL-60512 - Update e2fsprogs with upstream fixes and improvements (#2083621) - Fix out-of-bounds read/write via crafter filesystem (#2073548) - Sanity check free block group counts when calculating minimum size (#2054129) - Rebuild to ship libss-devel package (#1947449) - Fix internal configuration pseudo file (#1889464) - Rebase to the upstream release 1.45.6 (#1843548) - Fix clang warning introduced in previous release (#1783777) - Fix ABI breakage introduced in previous release (#1783777) - Rebase to the release 1.45.4 (#1783777) - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279) - fix crafted ext4 partition leads to out-of-bounds write (#1768709) - include note about supported rhel8 features and options (#1788573) - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP) - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - Note: version is bumped from 12 to 14 directly, as the z-stream version in 8.9 also has 13. So bumping it to 14, will prevent upgrade conflicts. - Resolves:RHEL-19690, RHEL-17244, RHEL-19312 - Fix loglevel regression - Related: rhbz#2182251, rhbz#2189742 - .fmf/version is needed to run the tests - Related: rhbz#2182251, rhbz#2189742 - Add missing ci.fmf file - Related: rhbz#2182251, rhbz#2189742 - Fix covscan errors found at gating - Related: rhbz#2182251, rhbz#2189742 - Backport test fixing commits to make the build pass - Related: rhbz#2182251, rhbz#2189742 - Fix NULL dereference during rekeying with algorithm guessing GHSL-2023-032 / CVE-2023-1667 - Fix possible authentication bypass GHSL 2023-085 / CVE-2023-2283 - Resolves: rhbz#2182251, rhbz#2189742 - Enable client and server testing build time - Fix failing rekey test on arch s390x - Resolves: rhbz#2126342 - Fix CI configuration for new TMT - Resolves: rhbz#2149910 - Make VERBOSE and lower log levels less verbose - Resolves: rhbz#2091512 - Fix CVE-2025-5318 Resolves: RHEL-111724 - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP) - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - Note: version is bumped from 12 to 14 directly, as the z-stream version in 8.9 also has 13. So bumping it to 14, will prevent upgrade conflicts. - Resolves:RHEL-19690, RHEL-17244, RHEL-19312 - Fix loglevel regression - Related: rhbz#2182251, rhbz#2189742 - .fmf/version is needed to run the tests - Related: rhbz#2182251, rhbz#2189742 - Add missing ci.fmf file - Related: rhbz#2182251, rhbz#2189742 - Fix covscan errors found at gating - Related: rhbz#2182251, rhbz#2189742 - Backport test fixing commits to make the build pass - Related: rhbz#2182251, rhbz#2189742 - Fix NULL dereference during rekeying with algorithm guessing GHSL-2023-032 / CVE-2023-1667 - Fix possible authentication bypass GHSL 2023-085 / CVE-2023-2283 - Resolves: rhbz#2182251, rhbz#2189742 - Enable client and server testing build time - Fix failing rekey test on arch s390x - Resolves: rhbz#2126342 - Fix CI configuration for new TMT - Resolves: rhbz#2149910 - Fix CVE-2025-5372 Resolves: RHEL-121232 - Fix CVE-2025-5318 Resolves: RHEL-111724 - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP) - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - Note: version is bumped from 12 to 14 directly, as the z-stream version in 8.9 also has 13. So bumping it to 14, will prevent upgrade conflicts. - Resolves:RHEL-19690, RHEL-17244, RHEL-19312 - Fix loglevel regression - Related: rhbz#2182251, rhbz#2189742 - .fmf/version is needed to run the tests - Related: rhbz#2182251, rhbz#2189742 - Add missing ci.fmf file - Related: rhbz#2182251, rhbz#2189742 - Fix covscan errors found at gating - Related: rhbz#2182251, rhbz#2189742 - Backport test fixing commits to make the build pass - Related: rhbz#2182251, rhbz#2189742 - Fix NULL dereference during rekeying with algorithm guessing GHSL-2023-032 / CVE-2023-1667 - Fix possible authentication bypass GHSL 2023-085 / CVE-2023-2283 - Resolves: rhbz#2182251, rhbz#2189742 - Enable client and server testing build time - Fix failing rekey test on arch s390x - Resolves: rhbz#2126342 - Backport CVE patches from 0.11.5 Resolves: RHEL-215677 Resolves: RHEL-215674 Resolves: RHEL-215680 Resolves: RHEL-215678 Resolves: RHEL-215675 Resolves: RHEL-215676 Resolves: RHEL-215679 - Fix CVE-2025-5372 Resolves: RHEL-121232 - Fix CVE-2025-5318 Resolves: RHEL-111724 - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP) - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - Note: version is bumped from 12 to 14 directly, as the z-stream version in 8.9 also has 13. So bumping it to 14, will prevent upgrade conflicts. - Resolves:RHEL-19690, RHEL-17244, RHEL-19312 - Fix loglevel regression - Related: rhbz#2182251, rhbz#2189742 - .fmf/version is needed to run the tests - Related: rhbz#2182251, rhbz#2189742 - Add missing ci.fmf file - Related: rhbz#2182251, rhbz#2189742 - Fix covscan errors found at gating - Related: rhbz#2182251, rhbz#2189742 - Backport test fixing commits to make the build pass - Related: rhbz#2182251, rhbz#2189742 - Fix NULL dereference during rekeying with algorithm guessing GHSL-2023-032 / CVE-2023-1667 - Fix possible authentication bypass GHSL 2023-085 / CVE-2023-2283 - Resolves: rhbz#2182251, rhbz#2189742 - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP) - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - Note: version is bumped from 12 to 14 directly, as the z-stream version in 8.9 also has 13. So bumping it to 14, will prevent upgrade conflicts. - Resolves:RHEL-19690, RHEL-17244, RHEL-19312 - Fix loglevel regression - Related: rhbz#2182251, rhbz#2189742 - .fmf/version is needed to run the tests - Related: rhbz#2182251, rhbz#2189742 - Add missing ci.fmf file - Related: rhbz#2182251, rhbz#2189742 - Fix covscan errors found at gating - Related: rhbz#2182251, rhbz#2189742 - Backport test fixing commits to make the build pass - Related: rhbz#2182251, rhbz#2189742 - Fix NULL dereference during rekeying with algorithm guessing GHSL-2023-032 / CVE-2023-1667 - Fix possible authentication bypass GHSL 2023-085 / CVE-2023-2283 - Resolves: rhbz#2182251, rhbz#2189742 - Enable client and server testing build time - Fix failing rekey test on arch s390x - Resolves: rhbz#2126342 - Fix CI configuration for new TMT - Resolves: rhbz#2149910 - Make VERBOSE and lower log levels less verbose - Resolves: rhbz#2091512 - Fix CVE-2025-5318 Resolves: RHEL-111724 - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP) - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - Note: version is bumped from 12 to 14 directly, as the z-stream version in 8.9 also has 13. So bumping it to 14, will prevent upgrade conflicts. - Resolves:RHEL-19690, RHEL-17244, RHEL-19312 - Fix loglevel regression - Related: rhbz#2182251, rhbz#2189742 - .fmf/version is needed to run the tests - Related: rhbz#2182251, rhbz#2189742 - Add missing ci.fmf file - Related: rhbz#2182251, rhbz#2189742 - Fix covscan errors found at gating - Related: rhbz#2182251, rhbz#2189742 - Backport test fixing commits to make the build pass - Related: rhbz#2182251, rhbz#2189742 - Fix NULL dereference during rekeying with algorithm guessing GHSL-2023-032 / CVE-2023-1667 - Fix possible authentication bypass GHSL 2023-085 / CVE-2023-2283 - Resolves: rhbz#2182251, rhbz#2189742 - Enable client and server testing build time - Fix failing rekey test on arch s390x - Resolves: rhbz#2126342 - Fix CI configuration for new TMT - Resolves: rhbz#2149910 - Fix CVE-2025-5372 Resolves: RHEL-121232 - Fix CVE-2025-5318 Resolves: RHEL-111724 - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP) - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - Note: version is bumped from 12 to 14 directly, as the z-stream version in 8.9 also has 13. So bumping it to 14, will prevent upgrade conflicts. - Resolves:RHEL-19690, RHEL-17244, RHEL-19312 - Fix loglevel regression - Related: rhbz#2182251, rhbz#2189742 - .fmf/version is needed to run the tests - Related: rhbz#2182251, rhbz#2189742 - Add missing ci.fmf file - Related: rhbz#2182251, rhbz#2189742 - Fix covscan errors found at gating - Related: rhbz#2182251, rhbz#2189742 - Backport test fixing commits to make the build pass - Related: rhbz#2182251, rhbz#2189742 - Fix NULL dereference during rekeying with algorithm guessing GHSL-2023-032 / CVE-2023-1667 - Fix possible authentication bypass GHSL 2023-085 / CVE-2023-2283 - Resolves: rhbz#2182251, rhbz#2189742 - Enable client and server testing build time - Fix failing rekey test on arch s390x - Resolves: rhbz#2126342 - Backport CVE patches from 0.11.5 Resolves: RHEL-215677 Resolves: RHEL-215674 Resolves: RHEL-215680 Resolves: RHEL-215678 Resolves: RHEL-215675 Resolves: RHEL-215676 Resolves: RHEL-215679 - Fix CVE-2025-5372 Resolves: RHEL-121232 - Fix CVE-2025-5318 Resolves: RHEL-111724 - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP) - Fix CVE-2023-6918 Missing checks for return values for digests - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection of malicious code through hostname - Note: version is bumped from 12 to 14 directly, as the z-stream version in 8.9 also has 13. So bumping it to 14, will prevent upgrade conflicts. - Resolves:RHEL-19690, RHEL-17244, RHEL-19312 - Fix loglevel regression - Related: rhbz#2182251, rhbz#2189742 - .fmf/version is needed to run the tests - Related: rhbz#2182251, rhbz#2189742 - Add missing ci.fmf file - Related: rhbz#2182251, rhbz#2189742 - Fix covscan errors found at gating - Related: rhbz#2182251, rhbz#2189742 - Backport test fixing commits to make the build pass - Related: rhbz#2182251, rhbz#2189742 - Fix NULL dereference during rekeying with algorithm guessing GHSL-2023-032 / CVE-2023-1667 - Fix possible authentication bypass GHSL 2023-085 / CVE-2023-2283 - Resolves: rhbz#2182251, rhbz#2189742 - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - backport std::regex check for invalid range (#2001788) - require docbook-style-xsl instead of docbook5-style-xsl (#2073888) - backport Default widths with -fdec-format-defaults patch (#2074614) - AlmaLinux changes - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - AlmaLinux changes - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - AlmaLinux changes - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - AlmaLinux changes - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - AlmaLinux changes - Update libstdc++ pretty printers from GCC 16 GTS (RHEL-169099) - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - Use LDFLAGS for building - Add missing BuildRequires: gcc/gcc-c++ - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Removed undefined-non-weak-symbol warnings - Initial packaging - Remove valgrind dependency as not being used and causing build to fail as it pulls in python3.11 - Fix subparsers - Add missing test yaml configuration file - RHEL-397 fips related corrections - Correct rpmdiff warnings - RHBZ #2018657 - Correct megaraid raid info (RHBZ #2018657) - Upgrade to 1.9.1 - Re-order dependencies - Correct multi-lib issue with python simulator files location - Upgrade to 1.9.0 (RHBZ #1939191) - Upgrade to 1.8.7 (RHBZ #1817117) - Remove valgrind dependency as not being used and causing build to fail as it pulls in python3.11 - Fix subparsers - Add missing test yaml configuration file - RHEL-397 fips related corrections - Correct rpmdiff warnings - RHBZ #2018657 - Correct megaraid raid info (RHBZ #2018657) - Upgrade to 1.9.1 - Re-order dependencies - Correct multi-lib issue with python simulator files location - Upgrade to 1.9.0 (RHBZ #1939191) - Upgrade to 1.8.7 (RHBZ #1817117) - Remove valgrind dependency as not being used and causing build to fail as it pulls in python3.11 - Fix subparsers - Add missing test yaml configuration file - RHEL-397 fips related corrections - Correct rpmdiff warnings - RHBZ #2018657 - Correct megaraid raid info (RHBZ #2018657) - Upgrade to 1.9.1 - Re-order dependencies - Correct multi-lib issue with python simulator files location - Upgrade to 1.9.0 (RHBZ #1939191) - Upgrade to 1.8.7 (RHBZ #1817117) - Remove valgrind dependency as not being used and causing build to fail as it pulls in python3.11 - Fix subparsers - Add missing test yaml configuration file - RHEL-397 fips related corrections - Correct rpmdiff warnings - RHBZ #2018657 - Correct megaraid raid info (RHBZ #2018657) - Upgrade to 1.9.1 - Re-order dependencies - Correct multi-lib issue with python simulator files location - Upgrade to 1.9.0 (RHBZ #1939191) - Upgrade to 1.8.7 (RHBZ #1817117) - Remove valgrind dependency as not being used and causing build to fail as it pulls in python3.11 - Fix subparsers - Add missing test yaml configuration file - RHEL-397 fips related corrections - Correct rpmdiff warnings - RHBZ #2018657 - Correct megaraid raid info (RHBZ #2018657) - Upgrade to 1.9.1 - Re-order dependencies - Correct multi-lib issue with python simulator files location - Upgrade to 1.9.0 (RHBZ #1939191) - Upgrade to 1.8.7 (RHBZ #1817117) - Remove valgrind dependency as not being used and causing build to fail as it pulls in python3.11 - Fix subparsers - Add missing test yaml configuration file - RHEL-397 fips related corrections - Correct rpmdiff warnings - RHBZ #2018657 - Correct megaraid raid info (RHBZ #2018657) - Upgrade to 1.9.1 - Re-order dependencies - Correct multi-lib issue with python simulator files location - Upgrade to 1.9.0 (RHBZ #1939191) - Upgrade to 1.8.7 (RHBZ #1817117) - Remove valgrind dependency as not being used and causing build to fail as it pulls in python3.11 - Fix subparsers - Add missing test yaml configuration file - RHEL-397 fips related corrections - Correct rpmdiff warnings - RHBZ #2018657 - Correct megaraid raid info (RHBZ #2018657) - Upgrade to 1.9.1 - Re-order dependencies - Correct multi-lib issue with python simulator files location - Upgrade to 1.9.0 (RHBZ #1939191) - Upgrade to 1.8.7 (RHBZ #1817117) - Rebuilt for 8.6. Resolves: rhbz#2046426 - Fix annocheck build issues (bz 1630632) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - resolves: RHEL-16508 - Rebase to version 2.4.1 - resolves: rhbz#2190419 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190419 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190419 - Rebase to version 2.4.0 - resolves: rhbz#2132056 - Update to version 2.3.4 - resolves: rhbz#2100088 - Rebuild to include python3-talloc-devel in CRB - resolves: rhbz#2013601 - Update to version 2.3.3 - resolves: rhbz#1945014 - Update to version 2.3.2 - resolves: rhbz#1817560 - Update to version 2.3.1 - related: rhbz#1754417 - Fix PY3 symbol names - resolves: RHEL-16508 - Rebase to version 2.4.1 - resolves: rhbz#2190419 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190419 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190419 - Rebase to version 2.4.0 - resolves: rhbz#2132056 - Update to version 2.3.4 - resolves: rhbz#2100088 - Rebuild to include python3-talloc-devel in CRB - resolves: rhbz#2013601 - Update to version 2.3.3 - resolves: rhbz#1945014 - Update to version 2.3.2 - resolves: rhbz#1817560 - Update to version 2.3.1 - related: rhbz#1754417 - Fix PY3 symbol names - Resolves: rhbz#2140600 - Honor %{valgrind_arches} - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 4.13 (#1535261) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 4.12 (#1456190) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 4.10 (#1413792) - Move development related docs to devel sub package - Cleanup spec and macros - Update valgrind ExclusiveArch - Backport the fix for CVE-2024-12133 - Resolves: rhbz#2140600 - Honor %{valgrind_arches} - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 4.13 (#1535261) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 4.12 (#1456190) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 4.10 (#1413792) - Backport the fix for CVE-2025-13151 (RHEL-139546) - Backport the fix for CVE-2024-12133 - Resolves: rhbz#2140600 - Honor %{valgrind_arches} - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 4.13 (#1535261) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 4.12 (#1456190) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - resolves: RHEL-16507 - Update to version libtdb-1.4.9 - resolves: rhbz#2190421 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190421 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190421 - Update to version 1.4.8 - resolves: rhbz#2132054 - Rebase to version 1.4.7 - resolves: rhbz#2077482 - Rebase to version 1.4.6 * resolves: rhbz#2013604 - Rebase to version 1.4.4 - Resolves: rhbz#1817565 - Rebase libtdb 1.4.3 for samba - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba - Related: rhbz#1754420 - Fix sssd tests (tdb) - Obsolete the python2 packages on upgrade - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8 - resolves: RHEL-16507 - Update to version libtdb-1.4.9 - resolves: rhbz#2190421 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190421 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190421 - Update to version 1.4.8 - resolves: rhbz#2132054 - Rebase to version 1.4.7 - resolves: rhbz#2077482 - Rebase to version 1.4.6 * resolves: rhbz#2013604 - Rebase to version 1.4.4 - Resolves: rhbz#1817565 - Rebase libtdb 1.4.3 for samba - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba - Related: rhbz#1754420 - Fix sssd tests (tdb) - Obsolete the python2 packages on upgrade - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8 - teamd: do no remove the ports on shutdown with -N [2148856] - teamd: stop iterating callbacks when a loop restart is requested [2148855] - libteamdctl: validate the bus name before using it [2065227] - Revert "teamd: Disregard current state when considering port enablement" [1874001] - 1.31 release - utils/bond2team: remove TYPE in ifcfg file [1858518] - utils/bond2team: keep delivering config to file if stdout not supplied [1858518] - teamd/lacp: silence ignore none LACP frames - Send LACP PDU right after the Actor state has been changed - Skip setting the same hwaddr to a lag port if not needed - Make all netlink socket RCVBUF sizes configurable - Don't return an error when timerfd socket return 0 - Fix ifinfo_link_with_port race condition with newlink - teamd: fix possible race in master ifname callback - 1.30 release - teamd: Disregard current state when considering port enablement [1851460] - teamd: fix ctx->hwaddr value assignment [1838952] - gating: fix the invalid ovs rpm link with latest version [1782427] - gating: fix the invalid ovs rpm link [1782427] - teamd/lacp: fix segfault due to NULL pointer dereference [1758073] - teamd: fix build error in expansion of macro teamd_log_dbgx [1758073] - teamd: update ctx->hwaddr after setting team dev to new hwaddr - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758073] - man teamd.conf: update some parameter default values [1732587] - 1.29 release - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops - initscripts: fix if/fi align - teamd: fix a json object memleak in get_port_obj() [1767685] - libteam: set netlink event socket as non-blocking [1684389] - libteam: double NETLINK_RCVBUF to fix -ENOMEM error - teamd: add a default value 1000 for link_watch.interval - gating: run VM with more RAM [1722449] - teamd: do no remove the ports on shutdown with -N [2148856] - teamd: stop iterating callbacks when a loop restart is requested [2148855] - libteamdctl: validate the bus name before using it [2065227] - Revert "teamd: Disregard current state when considering port enablement" [1874001] - 1.31 release - utils/bond2team: remove TYPE in ifcfg file [1858518] - utils/bond2team: keep delivering config to file if stdout not supplied [1858518] - teamd/lacp: silence ignore none LACP frames - Send LACP PDU right after the Actor state has been changed - Skip setting the same hwaddr to a lag port if not needed - Make all netlink socket RCVBUF sizes configurable - Don't return an error when timerfd socket return 0 - Fix ifinfo_link_with_port race condition with newlink - teamd: fix possible race in master ifname callback - 1.30 release - teamd: Disregard current state when considering port enablement [1851460] - teamd: fix ctx->hwaddr value assignment [1838952] - gating: fix the invalid ovs rpm link with latest version [1782427] - gating: fix the invalid ovs rpm link [1782427] - teamd/lacp: fix segfault due to NULL pointer dereference [1758073] - teamd: fix build error in expansion of macro teamd_log_dbgx [1758073] - teamd: update ctx->hwaddr after setting team dev to new hwaddr - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758073] - man teamd.conf: update some parameter default values [1732587] - 1.29 release - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops - initscripts: fix if/fi align - teamd: fix a json object memleak in get_port_obj() [1767685] - libteam: set netlink event socket as non-blocking [1684389] - libteam: double NETLINK_RCVBUF to fix -ENOMEM error - teamd: add a default value 1000 for link_watch.interval - gating: run VM with more RAM [1722449] - resolves: RHEL-16504 - update to version 0.16.0 - resolves: rhbz#2190425 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190425 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190425 Update to version 0.14.1 - resolves: rhbz#2132055 - Update to version 0.13.0 - resolves: rhbz#2077485 - Update to version 0.12.0 - resolves: rhbz#1980346 - Update to version 0.11.0 - Resolves: #1817563 - Upgrade tevent to 0.10.2 version for samba - Resolves: #1754421 - Upgrade tevent to 0.10.0 version for samba - Related: #1754421 - Fix sssd tests (tevent) - Remove the python2 subpackages on upgrade - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8 - resolves: RHEL-16504 - update to version 0.16.0 - resolves: rhbz#2190425 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190425 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190425 Update to version 0.14.1 - resolves: rhbz#2132055 - Update to version 0.13.0 - resolves: rhbz#2077485 - Update to version 0.12.0 - resolves: rhbz#1980346 - Update to version 0.11.0 - Resolves: #1817563 - Upgrade tevent to 0.10.2 version for samba - Resolves: #1754421 - Upgrade tevent to 0.10.0 version for samba - Related: #1754421 - Fix sssd tests (tevent) - Remove the python2 subpackages on upgrade - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8 - rpcb_clnt.c: Eliminate double frees in delete_cache() (RHEL-11293) - Null pointers so they are not used again (RHEL-11370) - rpcb_clnt.c add mechanism to try v2 protocol first (bz 2107650) - Multithreaded cleanup (bz 2112116) - clnt_dg_call: Fix use-after-free accessing the error number (bz 2042196) - Fix DoS vulnerability in libtirpc (bz 1940341) - blacklist: Add a few more well known ports (bz 1854147) - Disallow calling auth_refresh from clnt_call with RPCSEC_GSS (bz 1934866) - Enable gating using reverse dependency testing of nfs-utils (bz 1681965) - Updated the URL (bz 1638671) - Fix EOF detection on non-blocking socket (bz 1641875) - Fixed bad free in dup_ncp() (bz 1631614) - Removed a false positive from the covscan (bz 1602598) - Fixed issues found by covscan (bz 1602598) - binddynport.c honor ip_local_reserved_ports (RHEL-27005) - rpcb_clnt.c (fixed): Eliminate double frees in delete_cache() (RHEL-11293) - rpcb_clnt.c: Eliminate double frees in delete_cache() (RHEL-11293) - Null pointers so they are not used again (RHEL-11370) - rpcb_clnt.c add mechanism to try v2 protocol first (bz 2107650) - Multithreaded cleanup (bz 2112116) - clnt_dg_call: Fix use-after-free accessing the error number (bz 2042196) - Fix DoS vulnerability in libtirpc (bz 1940341) - blacklist: Add a few more well known ports (bz 1854147) - Disallow calling auth_refresh from clnt_call with RPCSEC_GSS (bz 1934866) - Enable gating using reverse dependency testing of nfs-utils (bz 1681965) - Updated the URL (bz 1638671) - Fix EOF detection on non-blocking socket (bz 1641875) - Fixed bad free in dup_ncp() (bz 1631614) - rpcb_clnt.c: Eliminate double frees in delete_cache() (RHEL-11293) - Null pointers so they are not used again (RHEL-11370) - rpcb_clnt.c add mechanism to try v2 protocol first (bz 2107650) - Multithreaded cleanup (bz 2112116) - clnt_dg_call: Fix use-after-free accessing the error number (bz 2042196) - Fix DoS vulnerability in libtirpc (bz 1940341) - blacklist: Add a few more well known ports (bz 1854147) - Disallow calling auth_refresh from clnt_call with RPCSEC_GSS (bz 1934866) - Enable gating using reverse dependency testing of nfs-utils (bz 1681965) - Updated the URL (bz 1638671) - Fix EOF detection on non-blocking socket (bz 1641875) - Fixed bad free in dup_ncp() (bz 1631614) - Removed a false positive from the covscan (bz 1602598) - Fixed issues found by covscan (bz 1602598) - binddynport.c honor ip_local_reserved_ports (RHEL-27005) - rpcb_clnt.c (fixed): Eliminate double frees in delete_cache() (RHEL-11293) - rpcb_clnt.c: Eliminate double frees in delete_cache() (RHEL-11293) - Null pointers so they are not used again (RHEL-11370) - rpcb_clnt.c add mechanism to try v2 protocol first (bz 2107650) - Multithreaded cleanup (bz 2112116) - clnt_dg_call: Fix use-after-free accessing the error number (bz 2042196) - Fix DoS vulnerability in libtirpc (bz 1940341) - blacklist: Add a few more well known ports (bz 1854147) - Disallow calling auth_refresh from clnt_call with RPCSEC_GSS (bz 1934866) - Enable gating using reverse dependency testing of nfs-utils (bz 1681965) - Updated the URL (bz 1638671) - Fix EOF detection on non-blocking socket (bz 1641875) - Fixed bad free in dup_ncp() (bz 1631614) - bump for automake 1.16 - harden libltdl.so (rhbz#1548751) - bake in versioned requirement on automake (rhbz#1193591) - fix testsuite FTBFS against automake 1.16.1 - bypass -specs=* to gcc (rhbz#985592) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - bump: for gcc 8.* - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - use new _module_build macro to limit dependencies for Modularity - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - use %license (rhbz#1418518) - Initial libtraceevent Related: rhbz#2075197 - Add gating (rhbz#2171394) - Remove conflict with trace-cmd Related: rhbz#2159965 - Initial libtracefs Related: rhbz#2075198 - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - backport std::regex check for invalid range (#2001788) - require docbook-style-xsl instead of docbook5-style-xsl (#2073888) - backport Default widths with -fdec-format-defaults patch (#2074614) - AlmaLinux changes - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - backport straight-line-speculation mitigation (#2108721) - AlmaLinux changes - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - fix deserialization for std::normal_distribution (#2130392, PR libstdc++/105502) - initialize std::normal_distribution::_M_saved (PR libstdc++/99536) - reject std::make_shared<T[]> (PR libstdc++/99006) - avoid changing PHIs in GIMPLE split_edge (#2117838) - AlmaLinux changes - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - s390x: add support for register arguments preserving (#2168205) - fix strlen range with a flexible member array (#2137448) - AlmaLinux changes - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - fix for TLSLD references (#2213753) - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506) - adjust a pattern in s390.md (PR target/87723, #2214847) - AlmaLinux changes - Update libstdc++ pretty printers from GCC 16 GTS (RHEL-169099) - Sync libstdc++ pretty printers to latest GTS (RHEL-82506). - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90240) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-50290). - Sync libstdc++ pretty printers to latest GTS (RHEL-50290). - don't reuse DEBUG_EXPRs with vector type (PR middle-end/100508, RHEL-79501) - rebuild for CVE-2020-11023 (RHEL-78274) - fix ICE in the vectorizer (RHEL-32886) - guard the bit test merging code in if-combine (RHEL-11483) - Fix invalid license tag - Resolves: rhbz#1611728 - update fseterr from current gnulib to make it build on RHEL-8 - Resolves: rhbz#1611728 - Update to upstream 0.9.9 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 0.9.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 0.9.7 - Update license to "GPLv2+ or LGPLv2+" - Add missing %license macro - Build with V=1 so that the build logs are useful. - Related: rhbz#1862551 - Fix versioning. The installed library is 1.0.7, make the rpm match. - bump release number for build, which includes -fPIC fix - Related: rhbz#1862551 - Update to upstream version 0.7. - Resolves: 1862551 - bump release to trigger gating tests - Related: bz#1724804 - Initial rhel8 package. - Resolves: bz#1724804 - Initial version - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Revert atexit patch (rhbz#1003193) - Install README.md as README is only a symlink to .md Resolves: rhbz#1849682 - Fix covscan warning Related: rhbz#1825941 - Cherry pick a few fixes since 1.0.23 release - Related: rhbz#1825941 - Update to 1.0.23 - Resolves: rhbz#1825941 - Add tests-examples subpackage for use by gating tests - Resolves: rhbz#1681769 - Update to 1.0.22 - Resolves: rhbz#1620092 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - The release 1.0.30 resolves major bugs - Include the new API for fwupd backporting Resovles: RHEL-184258 - Install README.md as README is only a symlink to .md Resolves: rhbz#1849682 - Fix covscan warning Related: rhbz#1825941 - Cherry pick a few fixes since 1.0.23 release - Related: rhbz#1825941 - Update to 1.0.23 - Resolves: rhbz#1825941 - Add tests-examples subpackage for use by gating tests - Resolves: rhbz#1681769 - Update to 1.0.22 - Resolves: rhbz#1620092 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Install README.md as README is only a symlink to .md Resolves: rhbz#1849682 - Fix covscan warning Related: rhbz#1825941 - Cherry pick a few fixes since 1.0.23 release - Related: rhbz#1825941 - Update to 1.0.23 - Resolves: rhbz#1825941 - Add tests-examples subpackage for use by gating tests - Resolves: rhbz#1681769 - Update to 1.0.22 - Resolves: rhbz#1620092 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - The release 1.0.30 resolves major bugs - Include the new API for fwupd backporting Resovles: RHEL-184258 - Install README.md as README is only a symlink to .md Resolves: rhbz#1849682 - Fix covscan warning Related: rhbz#1825941 - Cherry pick a few fixes since 1.0.23 release - Related: rhbz#1825941 - Update to 1.0.23 - Resolves: rhbz#1825941 - Add tests-examples subpackage for use by gating tests - Resolves: rhbz#1681769 - Update to 1.0.22 - Resolves: rhbz#1620092 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 1.0.22 - Resolves: rhbz#1620092 - Add tests-examples subpackage for use by gating tests - Resolves: rhbz#1681769 - Update to 1.0.23 - Resolves: rhbz#1825941 - Cherry pick a few fixes since 1.0.23 release - Related: rhbz#1825941 - Fix covscan warning Related: rhbz#1825941 - Install README.md as README is only a symlink to .md Resolves: rhbz#1849682 - The release 1.0.30 resolves major bugs - Include the new API for fwupd backporting Resovles: RHEL-184258 - Install README.md as README is only a symlink to .md Resolves: rhbz#1849682 - Fix covscan warning Related: rhbz#1825941 - Cherry pick a few fixes since 1.0.23 release - Related: rhbz#1825941 - Update to 1.0.23 - Resolves: rhbz#1825941 - Add tests-examples subpackage for use by gating tests - Resolves: rhbz#1681769 - Update to 1.0.22 - Resolves: rhbz#1620092 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Man-page update - Resolves: rhbz#2070941 - small typo in lchage man page - Actually apply the patch from the previous build - Resolves: rhbz#1670997 - Amend the user lifecycle auditing - Resolves: rhbz#1670997 - Amend the user lifecycle auditing - Resolves: rhbz#1608321 - [libuser] RHEL 8.0 Tier 0 Localization - Resolves: rhbz#1637398 - libuser-python3 should be renamed to comply with Packaging Guidelines - Resolves: rhbz#1602600 - Please review important issues found by covscan in "libuser-0.62-14.el8+7" package - Resolves: rhbz#1608321 - [libuser] RHEL 8.0 Tier 0 Localization - Resolves: rhbz#1558151 - libuser needs audit events around the account lifecycle - Use 2048bit keys in tests - Resolves: rhbz#1611729 - [RHEL8-S-BUILD] libuser Fails Scratch Build on rhel-8.0 - Drop the fakeroot dependency - Resolves: #1581448 - Remove fakeroot from libuser in RHEL8 - fix findings from static application security testing (#RHEL-35578) - translation update (#RHEL-12111) - Man-page update - Resolves: rhbz#2070941 - small typo in lchage man page - Actually apply the patch from the previous build - Resolves: rhbz#1670997 - Amend the user lifecycle auditing - Resolves: rhbz#1670997 - Amend the user lifecycle auditing - Resolves: rhbz#1608321 - [libuser] RHEL 8.0 Tier 0 Localization - Resolves: rhbz#1637398 - libuser-python3 should be renamed to comply with Packaging Guidelines - Resolves: rhbz#1602600 - Please review important issues found by covscan in "libuser-0.62-14.el8+7" package - Resolves: rhbz#1608321 - [libuser] RHEL 8.0 Tier 0 Localization - Resolves: rhbz#1558151 - libuser needs audit events around the account lifecycle - Use 2048bit keys in tests - Resolves: rhbz#1611729 - [RHEL8-S-BUILD] libuser Fails Scratch Build on rhel-8.0 - build with hardening LDFLAGS (#1548717) - remove obsolete macro and comments - add gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - fix license handling - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - Resolves: #1721229 - add gating.yaml - Resolves: #1721229 - add tests - Resolves: #1721229 - bump to v18 - libvarlink 16 - fixed coverity issues - Resolves: #1638294 - Interface name validation rule update - libvarlink 15 - Resolves: #1638294 - Interface name validation rule update - Resolves: #1615546 - BR: python3-devel - libvarlink 12 - libvarlink 11 - libvarlink 10 - libvarlink 9 - Resolves: #1721229 - add gating.yaml - Resolves: #1721229 - add tests - Resolves: #1721229 - bump to v18 - libvarlink 16 - fixed coverity issues - Resolves: #1638294 - Interface name validation rule update - libvarlink 15 - Resolves: #1638294 - Interface name validation rule update - Resolves: #1615546 - BR: python3-devel - libvarlink 12 - libvarlink 11 - libvarlink 10 - libvarlink 9 - New upstream release (0.3.2) - Resolves: rhbz#2100916 - Add gating - Resolves: #1682288 - Rebuild due to libevent soname bump - Obsolete removed tevent and tevent-devel subpackages - Switch to %ldconfig_scriptlets - Stop providing the tevent backend - https://bugzilla.samba.org/show_bug.cgi?id=12987 - New upstream release (0.3.0) - Fix memleak in vfree() - Misc spec file fixes - Fix all compile warnings - Update upstream URLs (no functional changes) - Move to autosetup - New upstream release (0.3.2) - Resolves: rhbz#2100916 - Add gating - Resolves: #1682288 - Rebuild due to libevent soname bump - Obsolete removed tevent and tevent-devel subpackages - Switch to %ldconfig_scriptlets - Stop providing the tevent backend - https://bugzilla.samba.org/show_bug.cgi?id=12987 - New upstream release (0.3.0) - Fix memleak in vfree() - Misc spec file fixes - Fix all compile warnings - Update upstream URLs (no functional changes) - Move to autosetup - New upstream release (0.3.2) - Resolves: rhbz#2100916 - Add gating - Resolves: #1682288 - Rebuild due to libevent soname bump - Obsolete removed tevent and tevent-devel subpackages - Switch to %ldconfig_scriptlets - Stop providing the tevent backend - https://bugzilla.samba.org/show_bug.cgi?id=12987 - New upstream release (0.3.0) - Fix memleak in vfree() - Misc spec file fixes - Fix all compile warnings - Update upstream URLs (no functional changes) - Move to autosetup - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 + libxcrypt-4.1.1-6 - Rebuilt with fixed binutils (#1954438) - Fixed salt interoperability issue (#1899716) - Move development panpages to libxcrypt-devel (#1613824) - Change crypt, crypt_r to return NULL on failure (#1613537) - Add manpages aliases for crypt, crypt_r, crypt_ra (#1612157) - New upstream release - New upstream release - Make testsuite fail on error again - Update patch0 with more upstream fixes - Add patch to update to recent development branch - Re-enable SUNMD5 support as it is BSD licensed now - Build compatibility symbols for glibc only - Skip failing testsuite once - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild + libxcrypt-4.1.1-6 - Rebuilt with fixed binutils (#1954438) - Fixed salt interoperability issue (#1899716) - Move development panpages to libxcrypt-devel (#1613824) - Change crypt, crypt_r to return NULL on failure (#1613537) - Add manpages aliases for crypt, crypt_r, crypt_ra (#1612157) - New upstream release - New upstream release - Make testsuite fail on error again - Update patch0 with more upstream fixes - Add patch to update to recent development branch - Re-enable SUNMD5 support as it is BSD licensed now - Build compatibility symbols for glibc only - Skip failing testsuite once - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2022-29824 (#2082298) - Bump release (#2057664) - Fix CVE-2022-23308 (#2057664) - Fix CVE-2021-3541 (#1958783) - Fix CVE-2021-3516 (#1956976) - Fix CVE-2021-3517 (#1957001) - Fix CVE-2021-3518 (#1957028) - Fix CVE-2021-3537 (#1957284) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2022-29824 (#2082298) - Bump release (#2057664) - Fix CVE-2022-23308 (#2057664) - Fix CVE-2021-3541 (#1958783) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2022-29824 (#2082298) - Bump release (#2057664) - Fix CVE-2022-23308 (#2057664) - Fix CVE-2021-3541 (#1958783) - Fix CVE-2021-3516 (#1956976) - Fix CVE-2021-3517 (#1957001) - Fix CVE-2021-3518 (#1957028) - Fix CVE-2021-3537 (#1957284) - Fix CVE-2020-24977 (#1878252) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2022-29824 (#2082298) - Bump release (#2057664) - Fix CVE-2022-23308 (#2057664) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2022-29824 (#2082298) - Bump release (#2057664) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2026-86144 (RHEL-269184) - Fix CVE-2026-86144 (RHEL-256306) - Fix CVE-2026-86140 (RHEL-256021) - Fix CVE-2026-74860 (RHEL-255956) - Fix CVE-2026-86143 (RHEL-256895) - Fix CVE-2026-86138 (RHEL-256950) - Lower xpath recursion limits (RHEL-249282) - Fix CVE-2026-6653 (RHEL-215616) - Fix CVE-2026-11979 (RHEL-215569) - Fix CVE-2025-6170 (RHEL-182012) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2025-6170 (RHEL-182012) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2026-11979 (RHEL-215569) - Fix CVE-2025-6170 (RHEL-182012) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Lower xpath recursion limits (RHEL-249282) - Fix CVE-2026-6653 (RHEL-215616) - Fix CVE-2026-11979 (RHEL-215569) - Fix CVE-2025-6170 (RHEL-182012) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2026-86144 (RHEL-256306) - Fix CVE-2026-86140 (RHEL-256021) - Fix CVE-2026-74860 (RHEL-255956) - Fix CVE-2026-86143 (RHEL-256895) - Fix CVE-2026-86138 (RHEL-256950) - Lower xpath recursion limits (RHEL-249282) - Fix CVE-2026-6653 (RHEL-215616) - Fix CVE-2026-11979 (RHEL-215569) - Fix CVE-2025-6170 (RHEL-182012) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Initial release for RHEL - New upstream release for fwupd backport - Resolves: RHEL-190658 - Initial release for RHEL - Release bump to solve repo content - Resolves: RHEL-240154 - New upstream release for fwupd backport - Resolves: RHEL-190658 - Initial release for RHEL - Fix CVE-2024-55549 (RHEL-83506) - Fix CVE-2025-24855 (RHEL-83492) - Fix unexpected RVT flag error (#1860467) - Fix CVE-2019-18197 (#1775517) - Fix CVE-2019-11068 (#1715732) - Fix multilib issues with devel subpackage (#1765632) - Conditionalize the python2 subpackage - Fix typo in Requires - Update to 1.1.32 - Cleanup spec - Re-enable hardened build - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Fix CVE-2023-40403 (aka 2022-4909) (RHEL-89374) - Fix CVE-2024-55549 (RHEL-83506) - Fix CVE-2025-24855 (RHEL-83492) - Fix unexpected RVT flag error (#1860467) - Fix CVE-2019-18197 (#1775517) - Fix CVE-2019-11068 (#1715732) - Fix multilib issues with devel subpackage (#1765632) - Conditionalize the python2 subpackage - Fix typo in Requires - Update to 1.1.32 - Cleanup spec - Re-enable hardened build - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Fix misplaced endif (RHEL-107912) - Fix CVE-2023-40403 (aka 2022-4909) (RHEL-89374) - Fix CVE-2024-55549 (RHEL-83506) - Fix CVE-2025-24855 (RHEL-83492) - Fix unexpected RVT flag error (#1860467) - Fix CVE-2019-18197 (#1775517) - Fix CVE-2019-11068 (#1715732) - Fix multilib issues with devel subpackage (#1765632) - Conditionalize the python2 subpackage - Fix typo in Requires - Update to 1.1.32 - Cleanup spec - Re-enable hardened build - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Fix CVE-2025-10911 (RHEL-171739) - Fix misplaced endif (RHEL-107912) - Fix CVE-2023-40403 (aka 2022-4909) (RHEL-89374) - Fix CVE-2024-55549 (RHEL-83506) - Fix CVE-2025-24855 (RHEL-83492) - Fix unexpected RVT flag error (#1860467) - Fix CVE-2019-18197 (#1775517) - Fix CVE-2019-11068 (#1715732) - Fix multilib issues with devel subpackage (#1765632) - Conditionalize the python2 subpackage - Fix typo in Requires - Update to 1.1.32 - Cleanup spec - Re-enable hardened build - Fix unexpected RVT flag error (#1860467) - Fix CVE-2019-18197 (#1775517) - Fix CVE-2019-11068 (#1715732) - Fix multilib issues with devel subpackage (#1765632) - Conditionalize the python2 subpackage - Fix typo in Requires - Update to 1.1.32 - Cleanup spec - Re-enable hardened build - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Fix broken xslt-config binary - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - New upstream release 0.1.7 (RHBZ#1371154) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Add patch for CVE-2014-9130 (RHBZ#1169371) - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - fix license handling - fix scriptlets so they work correctly on upgrades - Resolves: #1765520 - updated to 2.2.0 - add port speed capabilities - Resolves: #1612775 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - updated to 2.1.1 - fix scriptlets so they work correctly on upgrades - Resolves: #1765520 - updated to 2.2.0 - add port speed capabilities - Resolves: #1612775 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - updated to 2.1.1 - Rebase to 1.4.4 Resolvese: 1807452 - Add some basic gating tests - Initial rhel commit - Latest upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - Latest upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - Latest upstream - Latest upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Rebase to 1.4.4 Resolvese: 1807452 - Add some basic gating tests - Initial rhel commit - Latest upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild - Latest upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - Latest upstream - Latest upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - Update to latest upstream linux-firmware image for assorted updates - Navi33 dGPU firmware (rhbz 2047480) - Navi31 dGPU firmware (rhbz 2047483) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update to latest upstream linux-firmware image for assorted updates - Intel QAT Update - firmware for QAT (rhbz 2030316) - Update to latest upstream linux-firmware image for assorted updates - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012) - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update to latest upstream linux-firmware image for assorted updates - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later Resolves: rhbz#2183606 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update to latest upstream linux-firmware image for assorted updates - Navi32 dGPU firmware - Update to fix multi monitor behind TBT3 dock & random flickers - AMD Zen2 firmware update for cross-process information leak Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153 - Update to latest upstream linux-firmware image for assorted updates - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later Resolves: rhbz#2218670 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - AMD Zen3 and Zen4 firmware update for return address predictor velunerability Resolves: rhbz#2230415 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update to latest upstream linux-firmware image for assorted updates - Update AMD cpu microcode - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Work around absense of rdfind during build - Add file directives for new iwlwifi files Resolves: RHEL-16721, RHEL-14260 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Pass --ignore-duplicates to copy-firmware.sh - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity Resolves: RHEL-13982 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607) - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596) - amd-ucode early loading broken [rhel-8] (RHEL-16799)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: Add firmware for Lenovo Thinkbooks - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update green sardine firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update aldebaran firmware - amdgpu: add support for PSP 14.0.1 - amdgpu: add support for VPE 6.1.1 - amdgpu: add support for VCN 4.0.6 - amdgpu: add support for SDMA 6.1.1 - amdgpu: add support for GC 11.5.1 - amdgpu: Add support for DCN 3.5.1 - cnm: update chips&media wave521c firmware. - linux-firmware: Add ordinary firmware for RTL8821AU device - amdgpu: add new ISP 4.1.1 firmware - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - i915: Add BMG DMC v2.06 - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306 - linux-firmware: Update firmware tuning for HP Consumer Laptop - amdgpu: DMCUB updates for various AMDGPU ASICs - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops - linux-firmware: Add firmware and tuning for Lenovo Y770S - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops - i915: Update Xe2LPD DMC to v2.20 - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41 - linux-firmware: Add firmware for Lenovo Thinkbook 13X - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop - amdgpu: add DMCUB 3.5 firmware - amdgpu: add VPE 6.1.0 firmware - amdgpu: add VCN 4.0.5 firmware - amdgpu: add UMSCH 4.0.0 firmware - amdgpu: add SDMA 6.1.0 firmware - amdgpu: add PSP 14.0.0 firmware - amdgpu: add GC 11.5.0 firmware - amdgpu: update license date - Montage: update firmware for Mont-TSSE - linux-firmware: Add tuning parameter configs for CS35L41 Firmware - linux-firmware: Fix firmware names for Laptop SSID 104316a3 - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7 - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - iwlwifi: add gl FW for core87-44 release - iwlwifi: add ty/So/Ma firmwares for core87-44 release - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release - nvidia: Update Tegra210 XUSB firmware to v50.29 - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update navy flounder firmware - amdgpu: update renoir firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update sdma 6.0.1 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update yellow carp firmware - amdgpu: update green sardine firmware - amdgpu: update vega12 firmware - amdgpu: update raven2 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update sdma 6.0.2 firmware - amdgpu: update ipsp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update raven firmware - amdgpu: update navi14 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi12 firmware - amdgpu: update arcturus firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update smu 13.0.6 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update sdma 6.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update firmware - amdgpu: update aldebaran firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update gc 10.3.7 firmware - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9 - Merge https://github.com/pkshih/linux-firmware into rtw - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location - i915: Add DG2 HuC 7.10.15 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: update firmware for en8811h 2.5G ethernet phy - mekdiatek: Update mt8186 SOF firmware to v2.0.1 - rtw89: 8852c: update fw to v0.27.56.14 - rtw89: 8922a: add firmware v0.35.18.0 - rtw88: Add RTL8703B firmware v11.0.0 - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops - Montage: update firmware for Mont-TSSE - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 - amdgpu: DMCUB updates for various AMDGPU ASICs - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 - imx: sdma: update firmware to v3.6/v4.6 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: update 9000-family firmwares to core85-89 - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops - amdgpu: Update VCN firmware binaries - Intel IPU2: Add firmware files - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet - i915: Add Xe2LPD DMC v2.18 - i915: Update MTL DMC v2.21 - linux-firmware: update firmware for en8811h 2.5G ethernet phy - linux-firmware: add firmware for MT7996 - xe: First GuC release for LNL and Xe - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7) - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet - ice: update ice DDP package to 1.3.36.0 - Intel IPU3 ImgU: Move firmware file under intel/ipu - Intel IPU6: Move firmware binaries under ipu/ - check_whence: Add a check for duplicate link entries - WHENCE: Clean up section separators - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models - panthor: Add initial firmware for Gen10 Arm Mali GPUs - amdgpu: DMCUB Updates for DCN321: 7.0.38.0 - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0 - qcom: update venus firmware file for v5.4 - Montage: add firmware for Mont-TSSE - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32 - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware - linux-firmware: Fix filenames for some CS35L41 firmwares for HP - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2 - rtl_nic: add firmware for RTL8126A - linux-firmware: intel: Add IPU6 firmware binaries - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37 - qcom: Add Audio firmware for SM8550 HDK - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2 - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs" - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: Add Audio firmware for SM8650 MTP - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops - Intel Bluetooth: Make spacing consistent with rest of WHENCE - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update SDMA 5.2.7 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update SDMA 5.2.6 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: add GC 11.0.1 rlc_1 firmware - amdgpu: update vega20 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update beige goby firmware - amdgpu: update picasso firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update sienna cichlid firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update arcturus firmware - amdgpu: update navi14 firmware - amdgpu: add VCN 4.0.3 firmware - amdgpu: add SDMA 4.4.2 firmware - amdgpu: add SMU 13.0.6 firmware - amdgpu: add PSP 13.0.6 firmware - amdgpu: Add GC 9.4.3 firmware - amdgpu: update renoir firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi12 firmware - amdgpu: update yellow carp firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - RTL8192E: Remove old realtek WiFi firmware - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 - amdgpu: DMCUB updates for DCN314 - qcom: Update the firmware for Adreno a630 family of GPUs - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops - linux-firmware: update firmware for qat_4xxx devices Resolves: RHEL-35596, RHEL-16799, RHEL-15607 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: move signed x1e80100 signed firmware to the SoC subdir - qcom: add video firmware file for vpu-3.0 - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics - qcom: add gpu firmwares for x1e80100 chipset - linux-firmware: add firmware for qat_402xx devices - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update vega20 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update raven2 firmware - amdgpu: update aldebaran firmware - linux-firmware: Update AMD cpu microcode - intel: avs: Add topology file for I2S Analog Devices 4567 - intel: avs: Add topology file for I2S Nuvoton 8825 - intel: avs: Add topology file for I2S Maxim 98927 - intel: avs: Add topology file for I2S Maxim 98373 - intel: avs: Add topology file for I2S Maxim 98357a - intel: avs: Add topology file for I2S Dialog 7219 - intel: avs: Add topology file for I2S Realtek 5663 - intel: avs: Add topology file for I2S Realtek 5640 - intel: avs: Add topology file for I2S Realtek 5514 - intel: avs: Add topology file for I2S Realtek 298 - intel: avs: Add topology file for I2S Realtek 286 - intel: avs: Add topology file for I2S Realtek 274 - intel: avs: Add topology file for Digital Microphone Array - intel: avs: Add topology file for HDMI codecs - intel: avs: Add topology file for HDAudio codecs - Add a copy of Apache-2.0 - intel: avs: Update AudioDSP base firmware for APL-based platforms - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41 - amdgpu: Update ISP FW for isp v4.1.1 - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0 - qcom: Add AIC100 firmware files - amlogic: Update bluetooth firmware binary - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB - amdgpu: update DMCUB to v0.0.222.0 for DCN314 - iwlwifi: add ty/So/Ma firmwares for core88-87 release - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release - linux-firmware: add new cc33xx firmware for cc33xx chips - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops - Merge https://github.com/zijun-hu/qca_btfw into qca Resolves: RHEL-47353 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256) - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates forvarious AMDGPU ASICs - rtw89: 8922a: add fw format-1 v0.35.41.0 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - rtl_bt: Add firmware and config files for RTL8922A - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part - rtl_bt: de-dupe identical config.bin files - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7996 - Revert "i915: Update MTL DMC v2.22" - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12 - ath12k: WCN7850 hw2.0: update board-2.bin - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3 - ath11k: QCA2066 hw2.1: add board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1 - qcom: vpu: add video firmware for sa8775p - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: update path for video firmware for vpu-1/2/3.0 - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642 - rtw89: 8852c: add fw format-1 v0.27.97.0 - rtw89: 8852bt: add firmware 0.29.91.0 - amdgpu: Update ISP FW for isp v4.1.1 - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805 - Merge https://github.com/zijun-hu/qca_btfw into list-20240802 - mediatek: Update mt8195 SOF firmware - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802 - amdgpu: DMCUB updates for DCN314 - xe: First GuC release v70.29.2 for BMG - xe: Add GuC v70.29.2 for LNL - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL - i915: Update MTL DMC v2.22 - i915: update MTL GSC to v102.0.10.1878 - xe: Add BMG HuC 8.2.10 - xe: Add GSC 104.0.0.1161 for LNL - xe: Add LNL HuC 9.4.13 - i915: update DG2 HuC to v7.10.16 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: Update ISP FW for isp v4.1.1 - amdgpu: add new ISP 4.1.1 firmware - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641 - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07 - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release" - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - iwlwifi: add gl FW for core89-58 release - iwlwifi: update ty/So/Ma firmwares for core89-58 release - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release - mediatek: Update mt8195 SOF firmware and sof-tplg - ASoC: tas2781: fix the license issue for tas781 firmware - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008 - .gitignore: Ignore intermediate files - i915: Update Xe2LPD DMC to v2.21 Resolves: RHEL-54256, RHEL-54237 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-62359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: add board-2.bin - copy-firmware.sh: rename variables in symlink hanlding - copy-firmware.sh: remove no longer reachable test -L - copy-firmware.sh: remove no longer reachable test -f - copy-firmware.sh: call ./check_whence.py before parsing the file - copy-firmware.sh: warn if the destination folder is not empty - copy-firmware.sh: add err() helper - copy-firmware.sh: fix indentation - copy-firmware.sh: reset and consistently handle destdir - Revert "copy-firmware: Support additional compressor options" - copy-firmware.sh: flesh out and fix dedup-firmware.sh - Style update yaml files - editorconfig: add initial config file - check_whence.py: annotate replacement strings as raw - check_whence.py: LC_ALL=C sort -u the filelist - check_whence.py: ban link-to-a-link - check_whence.py: use consistent naming - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - rtlwifi: Add firmware v39.0 for RTL8192DU - Revert "ath12k: WCN7850 hw2.0: update board-2.bin" - amdgpu: DMCUB DCN35 update - brcm: Add BCM4354 NVRAM for Jetson TX1 - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920) - linux-firmware: add firmware for MT7920 - amdgpu: update raven firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update vega12 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 13.0.6 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - qcom: update gpu firmwares for qcm6490 chipset - mt76: mt7996: add firmware files for mt7992 chipset - mt76: mt7996: add firmware files for mt7996 chipset variants - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a - qcom: add gpu firmwares for sa8775p chipset - amdgpu: update DMCUB to v0.0.233.0 DCN351 - rtw89: 8922a: add fw format-2 v0.35.42.1 - copy-firmware: Handle links to uncompressed files - WHENCE: Fix battmgr.jsn entry type - amdgpu: Add VPE 6.1.3 microcode - amdgpu: add SDMA 6.1.2 microcode - amdgpu: Add support for PSP 14.0.4 - amdgpu: add GC 11.5.2 microcode - qcom: qcm6490: add ADSP and CDSP firmware - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301 - realtek: rt1320: Add patch firmware of MCU - i915: Update MTL DMC v2.23 - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops - amdgpu: Revert sienna cichlid dmcub firmware update - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903 - iwlwifi: add Bz FW for core89-58 release - rtl_nic: add firmware rtl8126a-3 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351 - qcom: vpu: restore compatibility with kernels before 6.6 Resolves: RHEL-62359 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-73145)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - Fix has_gnu_parallel function - rtl_bt: Add separate config for RLT8723CS Bluetooth part - amdgpu: revert VCN 3.1.2 firmware - amdgpu: revert yellow carp VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B - copy-firmware.sh: Fix typo in error message. - Add support to install files/symlinks in parallel. - Makefile: Remove obsolete/broken reference. - check_whence.py: Use a more portable shebang. - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E - cnm: update chips&media wave521c firmware. - WHENCE: Add "Info:" tag to text that's clearly not part of the license - rtl_nic: add firmware rtl8125bp-2 - qcom: venus-5.4: update firmware binary for sc7180 and qcs615 - cirrus: cs35l56: Correct filenames of SSID 17aa3832 - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43 - rtl_nic: add firmware rtl8125d-2 - Merge https://github.com/zijun-hu/qca_btfw into qca-bt - linux-firmware: Update firmware file for Intel BlazarU core - amdgpu: update dmcub 0.0.246.0 firmware - Add top level license file. - amdgpu: update raven firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update vpe 6.1.3 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update green sardine firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: add vcn 5.0.0 firmware - amdgpu: add smu 14.0.3 firmware - amdgpu: add sdma 7.0.1 firmware - amdgpu: add psp 14.0.3 firmware - amdgpu: add gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update renoir firmware - amdgpu: add smu 14.0.2 firmware - amdgpu: add sdma 7.0.0 firmware - amdgpu: add psp 14.0.2 firmware - amdgpu: add gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - upstream amdnpu firmware - QCA: Add Bluetooth nvm files for WCN785x - i915: Update Xe2LPD DMC to v2.24 - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - iwlwifi: add Bz-gf FW for core89-91 release - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2 - amdgpu: update smu 13.0.10 firmware - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: add smu 13.0.14 firmware - amdgpu: add sdma 4.4.5 firmware - amdgpu: add psp 13.0.14 firmware - amdgpu: add gc 9.4.4 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update navi12 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - ice: update ice DDP wireless_edge package to 1.3.20.0 - ice: update ice DDP comms package to 1.3.52.0 - ice: update ice DDP package to ice-1.3.41.0 - amdgpu: update DMCUB to v9.0.10.0 for DCN314 - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - linux-firmware: Update AMD cpu microcode - xe: Update GUC to v70.36.0 for BMG, LNL - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL Resolves: RHEL-73145 - Update linux-firmware to latest upstream (RHEL-68279)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - iwlwifi: add Bz-gf FW for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into qca - qcom: venus-5.4: add venus firmware file for qcs615 - qcom: update venus firmware file for SC7280 - QCA: Add 22 bluetooth firmware nvm files for QCA2066 - mediatek MT7922: update bluetooth firmware to 20241106163512 - mediatek MT7921: update bluetooth firmware to 20241106151414 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - qcom: Add QDU100 firmware image files. - qcom: Update aic100 firmware files - dedup-firmware.sh: fix infinite loop for --verbose - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7 - cnm: update chips&media wave521c firmware. - mediatek MT7920: update bluetooth firmware to 20241104091246 - linux-firmware: update firmware for MT7920 WiFi device - copy-firmware.sh: Run check_whence.py only if in a git repo - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - amdgpu: update DMCUB to v9.0.10.0 for DCN351 - rtw89: 8852a: update fw to v0.13.36.2 - rtw88: Add firmware v52.14.0 for RTL8812AU - i915: Update Xe2LPD DMC to v2.23 - linux-firmware: update firmware for mediatek bluetooth chip (MT7925) - linux-firmware: update firmware for MT7925 WiFi device - WHENCE: Add sof-tolg for mt8195 - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add link for QCS6490 GPU firmware - qcom: update gpu firmwares for qcs615 chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops - ath11k: move WCN6750 firmware to the device-specific subdir - xe: Update LNL GSC to v104.0.0.1263 - i915: Update MTL/ARL GSC to v102.1.15.1926 - amdgpu: DMCUB updates for various AMDGPU ASICs - mediatek: Add sof-tolg for mt8195 - i915: Add Xe3LPD DMC - cnm: update chips&media wave521c firmware. - linux-firmware: Add firmware for Cirrus CS35L41 - linux-firmware: Update firmware file for Intel BlazarU core - Makefile: error out of 'install' if COPYOPTS is set - check_whence.py: skip some validation if git ls-files fails - qcom: Add Audio firmware for X1E80100 CRD/QCPs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - brcm: replace NVRAM for Jetson TX1 - rtlwifi: Update firmware for RTL8192FU to v7.3 - make: separate installation and de-duplication targets - check_whence.py: check the permissions - Remove execute bit from firmware files - configure: remove unused file - rtl_nic: add firmware rtl8125d-1 - iwlwifi: add gl/Bz FW for core91-69 release - iwlwifi: update ty/So/Ma firmwares for core91-69 release - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release - Merge https://github.com/zijun-hu/qca_btfw into wcn785x - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy Resolves: RHEL-68279 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-79835)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - i915: Update Xe2LPD DMC to v2.28 - ASoC: tas2781: Add regbin firmware by index for single device - WHENCE: qca: add missing version information - WHENCE: qca: add missing version information - WHENCE: split generic QCA section into USB and serial sections - rtl_bt: Update RTL8852B BT USB FW to 0x0474_842D - iwlwifi: add Bz/gl FW for core93-123 release - iwlwifi: update ty/So/Ma firmwares for core93-123 release - iwlwifi: update cc/Qu/QuZ firmwares for core93-82 release - ASoC: tas2781: Add dsp firmware for new projects - amdgpu: DMCUB update for DCN401 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.4.1-00199-QCAHKSWPL_SILICONZ-1 - ath12k: QCN9274 hw2.0: update board-2.bin - ath11k: WCN6750 hw1.0: update board-2.bin - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: QCA6698AQ hw2.1: add to WLAN.HSP.1.1-04479-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: add board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.6 - ath11k: QCA2066 hw2.1: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.9.0.1-02146-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-02409-QCAHKSWPL_SILICONZ-1 - copy-firmware: Fix 'No such file or directory' error. - ath11k: add device-specific firmware for QCM6490 boards - qca: add more WCN3950 1.3 NVM files - qca: add firmware for WCN3950 chips - qca: move QCA6390 firmware to separate section - qca: restore licence information for WCN399x firmware - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates forvarious AMDGPU ASICs - Merge https://github.com/quicjathot/bt_msl_fw_1.1.3_00069 into wcn6750 - qca: Update Bluetooth WCN6750 1.1.0-00476 firmware to 1.1.3-00069 - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo T14s G6 Qualcomm platform - linux-firmware: Update FW files for MRVL SD8997 chips - i915: Update Xe2LPD DMC to v2.27 - Merge https://github.com/vivesahu-qcom/bt_hsp_fw650 into wcn6856 - qca: Update Bluetooth WCN6856 firmware 2.1.0-00642 to 2.1.0-00650 - rtl_bt: Update RTL8852B BT USB FW to 0x049B_5037 - amdgpu: Update ISP FW for isp v4.1.1 - trivial: contrib: wrap the process in try/except to catch server issues - trivial: contrib: use python-magic to detect encoding of emails - Merge https://github.com/che-jiang/qca_btfw into qca - QCA: Add Bluetooth firmware for QCA6698 - amdgpu: revert DMCUB 3.1.4 firmware - amlogic: update firmware for w265s2 - mediatek MT7925: update bluetooth firmware to 20250113153307 - linux-firmware: update firmware for MT7925 WiFi device - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi12 firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update yellow carp firmware - qcom: correct licence information for SA8775P binaries - qcom: update SLPI firmware for RB5 board - amdgpu: DMCUB updates for various AMDGPU ASICs - qcom: add DSP firmware for SA8775p platform - qcom: correct venus firmware versions - qcom: add missing version information - linux-firmware: Update firmware (v10) for mt7988 internal - iwlwifi: add Bz FW for core90-93 release - linux-firmware: wilc3000: add firmware for WILC3000 WiFi device - rtw89: 8852b: update fw to v0.29.29.8 - rtw89: 8852c: update fw to v0.27.122.0 - rtw89: 8922a: update fw to v0.35.54.0 - rtw89: 8922a: update fw to v0.35.52.1 and stuffs - rtw89: 8852bt: update fw to v0.29.110.0 - rtw89: 8852b: update fw to v0.29.29.7 - amdgpu: DMCUB updates for various AMDGPU ASICs - amdgpu: update sdma 6.0.3 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update sdma 4.4.5 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update picasso firmware - amdgpu: update beige goby firmware - amdgpu: update vangogh firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navi14 firmware - amdgpu: update arcturus firmware - amdgpu: update renoir firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update navi12 firmware - amdgpu: update vcn 4.0.3 firmware - amdgpu: update sdma 4.4.2 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi10 firmware - amdgpu: update aldebaran firmware - cirrus: cs35l56: Correct some links to address the correct amp instance - linux-firmware: Update firmware file for Intel Bluetooth Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Bluetooth Solar core - cirrus: cs35l41: Add Firmware for Ayaneo system 1f660105 Resolves: RHEL-79835 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-84781)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: update dcn 4.01 firmware to 0.1.3.0 - amdgpu: update dcn 3.5 firmware to 0.1.0.0 - cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA - cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA - qcom: Add DSP firmware for QCS8300 platform - mediatek: Add MT8188 SCP firmware - copy-firmware: fail gracefully if moreutils parallel is installed - copy-firmware: make script smarter about bad parameters - copy-firmware: add usage help text - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Add Audio firmware for Lenovo Slim 7x - qcom: Add Audio firmware for Lenovo T14s - amdgpu: DMCUB updates for various ASICs - rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU - rtw89: 8922a: update fw to v0.35.64.0 - rtw89: 8922a: update fw to v0.35.63.0 - rtw89: 8852c: update fw to v0.27.125.0 - iwlwifi: add Bz/gl FW for core94-91 release - iwlwifi: update ty/So/Ma firmwares for core94-91 release - iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release - amdgpu: update psp 14.0.0 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update gc 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update vcn 3.1.2 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update navi10 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update gc 10.3.7 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - qcom: Update gpu firmwares for qcs8300 chipset - linux-firmware: add firmware for qat_420xx devices - amdgpu: DMCUB updates for various ASICs - i915: Update Xe3LPD DMC to v2.20 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250305133215 - mediatek MT7920: update bluetooth firmware to 20250210151502 - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - intel_vpu: Add firmware for 37xx and 40xx NPUs - QCA: Add Bluetooth firmwares for QCA2066 with USB transport - QCA: Add two bluetooth firmware nvm files for QCA2066 - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653 - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653 - cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops - cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops - ASoC: tas2781: Update dsp firmware for Gemtree project - xe: Update GUC to v70.40.2 for BMG, LNL - amdgpu: DMCUB updates for various ASICs - amdgpu: DCUB update for DCN401 and DCN315 - cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update board-2.bin - rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07 - linux-firmware: Update AMD SEV firmware - linux-firmware: update firmware for MT7920 WiFi device - qca: update WCN3988 firmware - amdgpu: Update ISP FW for isp v4.1.1 - qcom: add firmware for Adreno A225 - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for en8811h 2.5G ethernet phy - i915: Update Xe3LPD DMC to v2.17 - ASoC: tas2781: Change regbin firmwares for single device Resolves: RHEL-84781 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-91590)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - intel: avs: Update topology file for Digital Microphone Array - amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0 - linux-firmware: Amphion: Update vpu firmware - amd_pmf: Update AMD PMF TA Firmware to v3.1 - amdgpu: update dcn 4.01 firmware to 0.1.8.0 - qcom: Add link for SM8350 GPU firmware - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250425073330 - rtw89: 8852c: add tables for dynamic antenna TXPWR - rtw89: 8922a: update fw to v0.35.71.0 - brcm: Add NVRAM file for Radxa Rock Pi X mini PC - i915: Update Xe3LPD DMC to v2.23 - rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1 - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - ath12k: QCN9274 hw2.0: update board-2.bin - qcom: vpu: update video firmware binary for SA8775p - iwlwifi: add Bz/gl FW for core95-82 release - iwlwifi: update ty/So/Ma firmwares for core95-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release - iwlwifi: add Bz-hr FW for core93-123 release - qcom: add QUPv3 firmware for QCS9100 platform - ASoC: tas2781: Swap channel for SPI projects. - bmi260: Add BMI260 IMU initial configuration data file - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06 - rtw89: 8922a: update element RF TXPWR to R40 - rtw89: 8852c: update element RF TXPWR to R78 - rtw89: 8852c: add fw v0.27.125.0 with format version 2 - Revert "rtw89: 8852c: update fw to v0.27.125.0" - qcom: vpu: add video firmware binary for qcm6490 - contrib: process_linux_firmware: set user agent - amdgpu: update vcn 4.0.5 firmware - amdgpu: update psp 14.0.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update psp 13.0.4 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update yellow carp firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vega20 firmware - amdgpu: update navi14 firmware - amdgpu: update vega12 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update vega10 firmware - amdgpu: update psp 13.0.5 firmware - amdgpu: update navi12 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi10 firmware - amdgpu: update vangogh firmware - amdgpu: update picasso firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update arcturus firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige goby firmware - amdgpu: update psp 13.0.8 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: update dcn 4.01 frmware to 0.1.6.0 - intel: ish: Update license file for ISH - intel: avs: Update topology file for I2S Analog Devices 4567 - intel: avs: Update topology file for I2S Realtek 5663 - intel: avs: Update topology file for I2S Realtek 5640 - intel: avs: Update topology file for I2S Realtek 5514 - intel: avs: Update topology file for I2S Realtek 298 - intel: avs: Update topology file for I2S Realtek 286 - intel: avs: Update topology file for I2S Realtek 274 - intel: avs: Update topology file for I2S Nuvoton 8825 - intel: avs: Update topology file for I2S Maxim 98927 - intel: avs: Update topology file for I2S Maxim 98373 - intel: avs: Update topology file for I2S Maxim 98357a - intel: avs: Update topology file for HDAudio codecs - intel: avs: Update topology file for HDMI codecs - intel: avs: Update topology file for Digital Microphone Array - intel: avs: Update topology file for I2S Dialog 7219 - xe: Update GUC to v70.44.1 for BMG and LNL - i915: Update GUC to v70.44.1 for i915 platforms - qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform - qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform - Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012 - linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy - QCA: Add 8 bluetooth nvm files for WCN785x btusb - QCA: Update WCN785x btusb firmware to 2.0.0-00790-3 - qcom: update firmware binary for SM8250 - mediatek: Add new mt8195 SOF firmware - mediatek: Add new mt8188 SOF firmware - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED - Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6" - intel_vpu: Update NPU firmware - cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6 - amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0 - amdgpu: update dcn 3.1.4 firmware to 8.0.78.0 Resolves: RHEL-91590 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-100433)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: venus-5.4: add the firmware binary for qcs615 - Revert "qcom: Add sdx61 Foxconn vendor firmware image file" - amdgpu: update dmcub fw for dcn401 - qcom: Add sdx61 Foxconn vendor firmware image file - brcm: Fix symlinks for Khadas VIM SDIO wifi config - amdgpu: update renoir firmware - amdgpu: update vcn 5.0.0 firmware - amdgpu: update smu 14.0.3 firmware - amdgpu: update sdma 7.0.1 firmware - amdgpu: update psp 14.0.3 firmware - amdgpu: update gc 12.0.1 firmware - amdgpu: update navy flounder firmware - amdgpu: update psp 14.0.4 firmware - amdgpu: update gc 11.5.2 firmware - amdgpu: update sienna cichlid firmware - amdgpu: add raven2 ip discovery firmware - amdgpu: update smu 14.0.2 firmware - amdgpu: update sdma 7.0.0 firmware - amdgpu: update psp 14.0.2 firmware - amdgpu: update gc 12.0.0 firmware - amdgpu: update vcn 4.0.6 firmware - amdgpu: update psp 14.0.1 firmware - amdgpu: update gc 11.5.1 firmware - amdgpu: update psp 13.0.11 firmware - amdgpu: update gc 11.0.4 firmware - amdgpu: add picasso ip discovery firmware - amdgpu: add raven ip discovery firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update psp 13.0.7 firmware - amdgpu: update gc 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update vega10 firmware - amdgpu: update gc 10.3.6 firmware - amdgpu: update smu 13.0.10 firmware - amdgpu: update psp 13.0.10 firmware - amdgpu: update gc 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: add smu 13.0.0 kicker firmware - amdgpu: add psp 13.0.0 kicker firmware - amdgpu: add gc 11.0.0 kicker firmware - amdgpu: add vcn 5.0.1 firmware - amdgpu: add sdma 4.4.4 firmware - amdgpu: add psp 13.0.12 firmware - amdgpu: add gc 9.5.0 firmware - amdgpu: add arcturus IP discovery firmware - amdgpu: update vcn 4.0.0 firmware - amdgpu: update smu 13.0.0 firmware - amdgpu: update psp 13.0.0 firmware - amdgpu: update gc 11.0.0 firmware - amdgpu: update psp 13.0.14 firmware - amdgpu: update gc 9.4.4 firmware - amdgpu: update psp 13.0.6 firmware - amdgpu: update gc 9.4.3 firmware - amdgpu: update beige_goby firmware - amdgpu: update vcn 4.0.5 firmware - amdgpu: update gc 11.5.0 firmware - amdgpu: update vcn 4.0.2 firmware - amdgpu: update gc 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - WHENCE: fix subtly incorrect licensing - amdgpu: update dmcub fw for dcn32 and dcn401 - mediatek: Update mt8186 SCP firmware - amdgpu: Update DMCUB fw for DCN401 & DCN315 - WHENCE: unify Driver statements - qcom: add gpu firmwares for X1P42100 chipset - QCA: Update WCN785x btusb firmware to 2.0.0-00799-5 - rtl_nic: update firmware of RTL8153A - qcom: sc8280xp: Updated power FW for X13s - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7916 - cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41 - Revert "iwlwifi: add Bz/gl FW for core96-76 release" - amdgpu: DMCUB updates for various ASICs - mediatek MT7922: update bluetooth firmware to 20250523103438 - mediatek MT7921: update bluetooth firmware to 20250523111333 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - xe: Update GUC to v70.45.2 for BMG, LNL - i915: Update GUC to v70.45.2 for DG2 - xe: Update LNL GSC to v104.0.5.1429 - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS8300 platform - Intel IPU7: Add firmware binary files - ice: update wireless_edge package to 1.3.23.0 - ice: update comms package to 1.3.55.0 - ice: update package to 1.3.43.0 - linux-firmware: Update firmware file for Intel Pulsar core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Quasar core - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - iwlwifi: add Bz/gl FW for core96-76 release - iwlwifi: update ty/So/Ma firmwares for core96-76 release - iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release - iwlwifi: update firmwares for 8000 series - iwlwifi: update 7265D firmware - mediatek MT7925: update bluetooth firmware to 20250526153203 - linux-firmware: update firmware for MT7925 WiFi device - qcom: sc8280xp: FW blob updates for X13s - brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3 - cirrus: cs35l41: Fix firmware links for several ASUS laptops - cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA - Adjust QUPv3 driver name - cnm: Add Chips&Media wave633c firmware for NXP i.MX9 - qcom: add QUPv3 firmware for QCM6490 platform - mediatek: Add mt8196 VCP firmware - cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA - nvidia: add GSP-RM version 570.144 firmware images - amdgpu: DMCUB updates for various ASICs - powervr: add firmware for Imagination Technologies BXS-4-64 GPU - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20 - brcmfmac: Add a couple of NanoPi devices - rtl_nic: add firmware rtl8127a-1 - cnm: update chips&media wave521c firmware. Resolves: RHEL-100433 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-114999)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - linux-firmware: update firmware for en8811h 2.5G ethernet phy - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - mediatek MT7922: update bluetooth firmware to 20250903123504 - linux-firmware: update firmware for MT7922 WiFi device - qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir - qcom: Add Audio topology for MONACO-EVK - qcom: add CDSP firmware for qcs615 platform - qcom: Add Audio topology for LEMANS-EVK - ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices. - qcom: vpu: update firmware binaries to fix encoder drain handling - intel_vpu: Update NPU firmware - Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers" - cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers - xe: Update GUC to v70.49.4 for BMG, LNL, PTL - i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL - qcom: add ADSP firmware for qcs615 platform - rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962 - iwlwifi: add Bz-HR FW for core90-93 release - Fix link entry for qat_895xcc.bin - Move QAT firmware to intel/ subdirectory - Move all iwlwifi top level files to intel/ directory - Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10" - ath11k: Support WCN6855 hw2.1 with NFA firmware variant - amdgpu: Update ISP FW for isp v4.1.1 - Update README.md to clarify S-o-b requirements - firmware: qcom: Reorder VPU firmware entries in WHENCE - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10 - cirrus: cs35l41: Move entries to correct driver section in WHENCE - cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops - ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - qcom: Add firmware binary for SM8650. - Link rtl8723b_config.bin to rtl8723bs - rtw89: 8922a: update fw to v0.35.80.3 - rtw89: 8852c: update fw to v0.27.129.4 - rtw89: 8852c: update fw to v0.27.129.3 - qcom: add CDSP firmware for x1e80100 platform - iwlwifi: add Bz/gl FW for core97-84 release - iwlwifi: update ty/So/Ma firmwares for core97-84 release - iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release - amdgpu: DMCUB updates for various ASICs - realtek: rt1321: Add patch firmware of MCU - mediatek: Add MT8189 SCP firmware - amdgpu: DMCUB updates for various ASICs - panthor: Add firmware for more Mali GPUs - amdgpu: update renoir firmware - amdgpu: add SMU 14.0.3 kicker firmware - amdgpu: add PSP 14.0.3 firmware - amdgpu: add GC 12.0.1 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SDMA 7.0.1 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update vega20 firmware - amdgpu: update SDMA 7.0.0 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update vpe 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update PSP 13.0.8 firmware - amdgpu: update GC 10.3.7 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey_cavefish firmware - amdgpu: update aldebaran firmware - qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091 - qcom: Add QDSP firmware file for Qualcomm QDU100 device. - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3 - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2 - ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: Update xbl_config firmware file. - amdgpu: Update GCN 4.0.5 microcode - amdgpu: Update SDMA 6.1.0 microcode - amdgpu: Update GC 11.5.0 microcode Resolves: RHEL-114999 - Update linux-firmware to latest upstream (RHEL-107488)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Add QDU100 firmware image files required for booting. - linux-firmware: Add firmware for airoha-npu driver - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20250721233113 - qcom: Update DSP firmware for qcm6490 platform - qcom: update Venus firmware file for v6.0 - i915: Xe3LPD DMC v2.29 - linux-firmware: Update AMD cpu microcode - qcom: Add QCS6490 symlink for QUPv3 firmware - qcom: Add firmware binary for SM8750. - amdgpu: update dmcub fw for dcn314 - cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA - cirrus: cs35l41: Update Firmware for Dell Oasis - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops - qcom: Add Audio topology for QCS6490 RB3Gen2 - intel_vpu: Update NPU firmware - amdgpu: update dmcub fw for various DCN version - WHENCE: extract more license statements - WHENCE: clarify io_ti origin - amdgpu: Update GC 11.5.1 microcode - rtw89: 8852b: update fw to v0.29.128.0 - rtw89: 8852bt: update fw to v0.29.127.0 - rtw89: 8922a: add regd fw element with version R72-R6 - rtw89: 8852c: add regd fw element with version R72-R57 - rtw89: 8922a: update BB parameter V49 - qcom: Update gpu firmwares of QCS615 chipset - linux-firmware: Update firmware file for Intel Solar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - xe: Add fan_control v203.0.0.0 for BMG - linux-firmware: Update AMD cpu microcode - amdgpu: Add DCN 3.6 - amdgpu: Add PSP 14.0.5 - amdgpu: Add SDMA 6.1.3 - amdgpu: Add GC 11.5.3 - mediatek MT7921: update bluetooth firmware to 20250625154126 - qcom/adreno: document firmware revisions - qcom/adreno: move A610 and A702 ZAP files to Adreno driver section - qcom: Add sdx61 Foxconn vendor firmware image file - Revert "linux-firmware: Update firmware file for Intel Pulsar core" - qcom/adreno: sort entries in WHENCE - xe: First HuC release for Pantherlake - xe: First GuC release for Pantherlake - linux-firmware: update firmware for MT7921 WiFi device - rtw89: 8922a: update fw to v0.35.80.0 - rtw89: 8852c: update fw to v0.27.129.1 - rtw89: 8852c: update fw to v0.27.128.0 - WHENCE: extract license texts - WHENCE: expand the advansys license statement - WHENCE: some older AMD drivers are MIT licensed - qcom: update firmware binary for SM8550 - amdgpu: DMCUB updates for DCN401 Resolves: RHEL-107488 - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Update linux-firmware to latest upstream (RHEL-140730)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom: Update DSP firmware for QCM6490 platform - linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20260106153314 - mediatek MT7920: update bluetooth firmware to 20260105151350 - mediatek MT7922: update bluetooth firmware to 20260106153735 - linux-firmware: update firmware for MT7922 WiFi device - Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900 - amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0 - qcom: Update DSP firmware for sa8775 platform - QCA: Add Bluetooth firmware for QCC2072 uart interface - i915: Xe3p_LPD DMC v2.33 - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: update firmware for MT7920 WiFi device - qcom: Update aic100 firmware files - qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105 - firmware: Revert kernel_boot.elf due to license compliance issue - linux-firmware: add firmware for an8811hb 2.5G ethernet phy - i915: Xe3LPD_3002 DMC v2.28 - i915: Xe3LPD DMC v2.33 - intel_vpu: Add firmware for 50xx NPUs and update older ones - linux-firmware: Update AMD SEV firmware - amdgpu: DMCUB updates for various ASICs - qcom: venus-5.4: fix ELF segment alignment to 4 bytes - mediatek MT7925: update bluetooth firmware to 20251210093205 - linux-firmware: update firmware for MT7925 WiFi device - rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller - qcom: Update CDSP firmware for qcm6490 platform - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55 - linux-firmware: Add firmware file for Intel Scorpius core - rtw89: 8852b: update fw to v0.29.29.15 - cirrus: cs35l41: Update firmware and tuning for various HP laptops - cirrus: cs35l41: Add support for new HP Clipper laptop - qcom: drop compatibility a640_zap.mdt symlink - qcom: add version for a530v3_gpmu.fw2 - xe: Update GUC to v70.55.3 for BMG, PTL - iwlwifi: add Bz/Sc FW for core101-82 release - iwlwifi: Add Sc/Gf firmware for core101-82 release - iwlwifi: update ty/So/Ma firmwares for core101-82 release - iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release - amdgpu: DMCUB updates for various ASICs - qcom: Add firmwares for sm8150 GPU - qcom: Add firmwares for sm8450 GPU - qcom: Add firmwares for sm8550 GPU - qcom: Add firmwares for sm8650 GPU - qcom: Add firmwares for sm8750 GPU - Makefile: add licence header - ath10k: WCN3990 hw1.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA4019 hw1.0: update board-2.bin - cirrus: cs35l41: Add support for new HP laptops - Revert "amdgpu: update GC 11.5.0 firmware" - linux-firmware: Update amd-ucode copyright information - linux-firmware: Update AMD cpu microcode - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA2066 hw2.1: update board-2.bin - qcom: update ADSP firmware for x1e80100 platform, change the license - qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE - Reapply "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update SMU 14.0.3 firmware" - Revert "amdgpu: update GC 10.3.6 firmware" - Revert "amdgpu: update GC 11.5.1 firmware" - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251124093155 - intel_vpu: Update NPU firmware - WHENCE: fix version string for video firmware - qcom: vpu: update video firmware binary for SM8250 - xe: Update GUC to v70.54.0 for BMG, PTL - Revert "amdgpu: update GC 11.0.1 firmware" - QCA: Add Bluetooth firmware for WCN685x uart interface - qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3 - qcom: venus-5.4: update firmware binary for v5.4 - qcom: venus-5.4: remove unused firmware file - iwlwifi: add Sc/Wh FW for core98-181 release - amdgpu: DMCUB updates for various ASICs - rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04 - ASoC: tas2781: Add more symbol links on SPI devices - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update smu 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update smu 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update aldebaran firmware - amdgpu: add vce1 firmware - mediatek MT7922: update bluetooth firmware to 20251118163447 - linux-firmware: update firmware for MT7922 WiFi device - qcom: update ADSP, CDSP firmware for kaanapali platform, change the license - qcom: add ADSP, CDSP firmware for sm8750 platform - rtl_nic: add firmware rtl9151a-1 - qcom: Update aic100 firmware files - mt76: add firmware for MT7990 - mt76: update firmware for MT7992 - mt76: update firmware for MT7996 - cirrus: cs35l57: Add firmware for a few Dell products - cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec - qcom: Add sdx35 Foxconn vendor firmware image file - linux-firmware: Update AMD cpu microcode - rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905 - linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy - rtw88: 8822b: Update firmware to v30.20.0 - rtl_nic: add firmware rtl8125k-1 - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - ASoC: tas2781: Update dsp firmware for HP and ASUS projects - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add SOCCP firmware for kaanapali platform - xe: Update GUC to v70.53.0 for BMG, LNL, PTL - i915: Update GUC to v70.53.0 for DG2, MTL - rtw89: 8851b: update fw to v0.29.41.5 - rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2 - rtw89: 8852b: update fw to v0.29.29.14 - Revert "rtw89: 8852b: update fw to v0.29.128.0" - rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1 - rtw89: 8852bt: update fw to v0.29.122.1 - Revert "rtw89: 8852bt: update fw to v0.29.127.0" - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it - amdgpu: DMCUB updates for various ASICs - linux-firmware: Update WHENCE for microcode_amd_fam19h.bin - linux-firmware: Update AMD cpu microcode - linux-firmware: update firmware for MT7925 WiFi device - mediatek MT7925: update bluetooth firmware to 20251015213201 - rtl_bt: Add firmware and config files for RTL8761CUV - linux-firmware: Update AMD cpu microcode - qcom: add ADSP firmware for kaanapali platform - amdgpu: DMCUB updates for various ASICs - linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system. - mediatek MT7920: update bluetooth firmware to 20251020151255 - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7920 WiFi device - amd-ucode: Fix minimum revisions in README - cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID - mediatek MT7922: update bluetooth firmware to 20251020143443 - Revert "linux-firmware: update firmware for MT7922 WiFi device" - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659 - iwlwifi: add Bz/Fm and gl FW for core98-161 release - iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release - iwlwifi: update ty/So/Ma firmwares for core98-161 release - iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release - intel: qat: Fix missing link Resolves: RHEL-140730 - Move Intel wireless firmware from linux-firmware back to iwl*-firmware (RHEL-120905) - Update linux-firmware to latest upstream   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - nvidia: add generic bootloader for GSP-enabled systems - linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build - qcom: vpu: rename firmware binaries - Intel IPU7: Update product signed firmware binary - i915: Xe2LPD DMC v2.29 - i915: Xe3LPD DMC v2.32 - i915: Xe3LPD_3002 DMC v2.27 - WHENCE: nvidia: rearrange GSP-RM firmware lines - linux-firmware: Add ISH firmware file for Intel Pather Lake platform - linux-firmware: Update firmware file for Intel Magnetar core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: add CDSP firmware for kaanapali platform - qcom: add version for A650 GMU firmware - qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100 - qcom: Add firmwares for Kaanapali GPU - qcom: Update A623 GMU fw - qcom: Fix QCS615 chipset's GPU secure fw - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - WHENCE: remove link for Kaanapali video firmware - intel_vpu: Update NPU firmware - linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems - Update VCN for Navi1x, Green Sardine and Renoir - WHENCE: extract multitech license text - WHENCE: extract ueagle license - WHENCE: use LICENCE.sensoray for s2255drv - WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray - WHENCE: clean up emi62 and yam license statements - qcom: vpu: update video firmware binary for SM8550 - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA - qcom: vpu: add video firmware for Kaanapali - qcom: Update DSP firmware for qcs8300 platform. - qcom: Add Audio topology for HAMOA-EVK - intel/ish:Add ISH firmware file for Intel Lunar Lake platform - mediatek: update firmware version info for MT7986/81/16 - linux-firmware: ql2500_fw: update ISP25xx Firmware - qcom: Update aic100 firmware files - qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a - amdgpu: DMCUB updates for various ASICs - mediatek: mtk_wed: drop links for mt7988 - Revert "amdgpu: update gc 10.3.6 firmware" - qcom: Update DSP firmware for qcs8300 platform. - powervr: update firmware for Imagination Technologies BXS-4-64 GPU - qcom: Update DSP firmware for sa8775p platform. - amdgpu: DMCUB updates for various ASICs - ath12k: WCN7850 hw2.0: update board-2.bin - qcom: move LEMANS EVK firmware to correct location - amdgpu: update PSP 14.0.3 kicker firmware - amdgpu: update vega20 firmware - amdgpu: update vega12 firmware - amdgpu: update vega10 firmware - amdgpu: update vangogh firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update SMU 13.0.0 kicker firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware Resolves: RHEL-120905 - Update linux-firmware to latest upstream (RHEL-254138)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - [cypress]: Update firmware for cyfmac43455 SDIO - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00079 - amdgpu: DMCUB updates for various ASICs - amdgpu: add VCN 5.3.0 firmware - qcom: update CDSP firmware for x1e80100 platform - qcom: add QUPv3 firmware for nord - qcom: add HPASS firmware for nord platform - linux-firmware: Update firmware file for Intel BlazarIW core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - qcom/sa8775p: update signature on cdsp1 firmware - Update linux-firmware to latest upstream (RHEL-245397)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - qcom/sa8775p: update signature on cdsp1 firmware - cirrus: cs35l54: Add Cirrus CS35L54 firmware mappings for an HP laptop - linux-firmware: Upload firmware for tas2573 stereo - intel: avs: Add AudioDSP base firmware for LKF platforms - intel: avs: Update AudioDSP firmware for APL-based platforms - intel: avs: Update AudioDSP firmware for SKL-based platforms - intel: catpt: Update AudioDSP firmware for BDW platforms - mediatek MT7925: update bluetooth firmware to 20260813113236 - linux-firmware: update firmware for MT7925 WiFi device - copy-firmware: Do not fail without GNU parallel - QCA: Update Bluetooth WCN3988 firmware 2.1.5.c5-00042 to 2.1.5.c5-00060 - amdgpu: add VPE 2.0.0 firmware - amdgpu: add SDMA 6.1.4 firmware - amdgpu: add DCN 4.2 firmware - amdgpu: add PSP 15.0.9 firmware - amdgpu: add PSP 15.0.0 firmware - amdgpu: add GC 11.7.1 firmware - amdgpu: add GC 11.7.0 firmware - amdgpu: DMCUB update for DCN314 - qca: Update Bluetooth QCC2072 UART interface firmware from 1.1.0-00295 to 1.1.0-00340 - iwlwifi: add Bz/Sc FW for core24.70-49 release - iwlwifi: Add Hr/Gf firmware for core24.70-49 release - iwlwifi: update ty/So/Ma firmwares for core24.70-49 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.70-49 release - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Samsung laptops - cirrus: cs42l45: Add new SSIDs for Dell laptops - qcom: add NSP firmware for nord platform - cirrus: cs35l56: Add firmware for Cirrus Amps for an ASUS laptop - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for some Dell laptops - WHENCE: Move qcom qcdxkmsuc8[23]80.mbn firmwares to Adreno section - WHENCE: Separate qcom SoC remoteproc firmwares - amdgpu: DMCUB updates for various ASICs - Revert "amdgpu: update GC 10.3.6 firmware" - qcom: add CDSP firmware for eliza platform - qcom: vpu: add Gen2 firmware binary for Eliza - Update linux-firmware to latest upstream (RHEL-233673)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - ath12k: QCC2072 hw1.0: update to WLAN.COL.1.0.c2-00228-QCACOLSWPL_V1_TO_SILICON-1 - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for some Dell laptops - amdgpu: update vangogh firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update renoir firmware - amdgpu: update yellow carp firmware - amdgpu: update raven2 firmware - amdgpu: update raven firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update picasso firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update vcn 4.0.4 firmware - amdgpu: update SMU 13.0.7 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update SMU 13.0.10 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SMU 13.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update beige goby firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update navy flounder firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update navi12 firmware - amdgpu: update navi10 firmware - amdgpu: add PSP 13.0.15 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update green sardine firmware - amdgpu: update arcturus firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update aldebaran firmware - linux-firmware: update firmware for MT7922 WiFi device - morsemicro: add firmware for mm8108 support - ath10k: WCN3990 hw1.0: update board-2.bin - linux-firmware: Update firmware for an8811hb 2.5G ethernet phy - xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S - mediatek MT7922: update bluetooth firmware to 20260724143815 - airoha: update AN7583 NPU firmwares to version 0.5 - linux-firmware: Add firmware for new project - qcom: Add gpu firmwares for Eliza chipset Resolves: RHEL-233673 - Update linux-firmware to latest upstream (RHEL-214056)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops - rtw89: 8922d: add fw 0.35.113.2 - qcom: venus-5.4: fix vp9 decoder assertion failure - qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters - qcom: Update qdsp6sw firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - intel_vpu: Update NPU firmware - qcom: Update DSP firmware for qcs8300 platform - linux-firmware: Add firmware for new soundwire projects - rtw88: add firmware v41.0.0 for RTL8723B - linux-firmware: Update AMD cpu microcode - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - amdgpu: DMCUB updates for various ASICs - amdgpu: DMCUB updates for various ASICs - qcom: add ADSP firmware for hawi platform - powervr: add firmware for Imagination Technologies BXM-4-64 GPU - qcom: Update DSP firmware for sa8775p platform Resolves: RHEL-214056 - Update linux-firmware to latest upstream (RHEL-188391)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - xe: Release GuC firmware for NVL-S - cirrus: cs35l56: Update firmware for the ASUS UX5406SA - qcom: vpu: add Gen2 firmware binary for Purwa - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - QCA: Add Bluetooth firmware for WCN6855 ROM 1.0 - iwlwifi: add Bz/Sc FW for core24.60-33 release - iwlwifi: Add Hr/Gf firmware for core24.60-33 release - iwlwifi: update ty/So/Ma firmwares for core24.60-33 release - iwlwifi: update cc/Qu/QuZ firmwares for core24.60-33 release - cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops - docs: address feedback on LICENSE-CRITERIA.md - Adjust statement on existing firmware - docs: add LICENSE-CRITERIA.md as project licensing policy - ueagle-atm: sadly drop unlicensed files - linux-firmware: qcom: sync audioreach firmwares from v1.0.4 build - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072 - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware for new projects - rtw89: 8852a: add TX power track R34 - linux-firmware: Update AMD SEV firmware - nxp: add firmware for IW61x WiFi device - mediatek MT7922: update bluetooth firmware to 20260605203811 - mediatek MT7925: update bluetooth firmware to 20260605184935 - linux-firmware: update firmware for MT7925 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - amdgpu: DMCUB updates for various ASICs - qcom: add LPAICP firmware for shikra platform - qcom: Add qdsp6sw firmware for shikra platform - linux-firmware: update firmware for MT7986 - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for MT7996 - linux-firmware: update firmware for MT7992 - linux-firmware: update firmware for MT7990 - qcom: Update ADSP firmware for Kaanapali platform - qcom: update ADSP firmware for glymur platform - qcom: update CDSP firmware for glymur platform - QCA: Add bluetooth firmware nvm files for USI/NFA725B - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel Scorpius core - qcom: update ADSP firmware for qcs615 platform - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops - rtl_bt: Update RTL8852A BT USB firmware to 0x244F_91B6 - realtek: rt1321: Update the patch code to v1.10 - amdgpu: DMCUB updates for various ASICs - QCA: Update Bluetooth WCN3950 firmware 1.3.0-00108 to 1.3.0-00184 - qcom: update CDSP firmware for shikra platform - qcom: Update ADSP firmware for Glymur platform - Remove any files with unknown licenses - AGENTS.md, README: address second round of MR review - README: document AI assisted contribution convention - AGENTS.md: clarify areas raised in MR review - Add AGENTS.md for AI coding agents - LICENSES: update GPL-2.0 text and references - LICENSES: rename GPL-3 to GPL-3.0-only - LICENSES: rename Apache-2 to Apache-2.0 - Move firmware licenses to a LICENSES/ directory - qcom: update ADSP firmware for sm8750 platform Resolves: RHEL-188391 - Update linux-firmware to latest upstream (RHEL-179825)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00666 to 2.1.0-00669 - qcom: Update DSP firmware for qcs8300 platform - qcom: Update DSP firmware for sa8775p platform - amdgpu: Update DMCUB fw for DCN314 - amdgpu: revert yellow carp VCN firmware - amdgpu: revert vangogh VCN firmware - amdgpu: revert sienna cichlid VCN firmware - amdgpu: revert navy flounder VCN firmware - amdgpu: revert dimgrey cavefish VCN firmware - amdgpu: revert beige_goby VCN firmware - qcom: update CDSP firmware for x1e80100 platform - cirrus: cs35l56: Add firmware for Cirrus Amps for a Dell laptop - linux-firmware: Add RCA firmware files for tas257x projects - intel_vpu: Update NPU firmware - cirrus: cs35l63: Add Cirrus CS35L63 firmware mappings for various Dell laptops - cirrus: cs35l56: Update firmware for Cirrus Amps for a couple of Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for a Lenovo laptop - QCA: Add BCS calibration binary for QCC2072 - QCA: Update Bluetooth firmware for QCC2072 UART interface - amdgpu: DMCUB updates for various ASICs - rtl_nic: add firmware rtl8261c.bin for RTL8261c - cirrus: cs35l56: Add Cirrus CS35L56 firmware mappings for two Dell laptops - i915: Xe3LPD DMC v2.36 - i915: Xe3LPD_3002 DMC v2.31 - i915: Xe3p_LPD DMC v2.37 - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - qcom: Add gpu firmwares for Shikra chipset - cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops - rtw89: 8852b: update fw to v0.29.29.18 - rtw89: 8852bt: update fw to v0.29.122.2 - amdgpu: Update gc 11.0.1 microcode - ASoC: tas2783: Add Firmware files for tas2783A projects - linux-firmware: add firmware for MT7927 WiFi device - Add HP ISH firmware for Intel Panther Lake systems - ti: Add PCM6240 firmware with multiple audio profiles support - qcom: add CDSP firmware for shikra platform - amdgpu: DMCUB updates for various ASICs - qcom: update ADSP firmware for x1e80100 platform - lt*_fw.bin: move to Lontium subdir - qcom: Add cdsp1r.jsn for sa8775p platform - amdgpu: rembrandt DMCUB v4.0.74.0 - linux-firmware: Add firmware for Lontium LT9611C - xe: Update GUC to v70.65.0 for LNL, BMG, PTL - amdgpu: update SMU 14.0.3 kicker firmware - amdgpu: update navy flounder firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.3 firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update VCN 3.1.2 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update navi14 firmware - amdgpu: update SDMA 6.0.3 firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update navi12 firmware - amdgpu: update vangogh firmware - amdgpu: update navi10 firmware - amdgpu: update green sardine firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update SDMA 6.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 4.4.4 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - amdgpu: update SDMA 4.4.5 firmware - amdgpu: update PSP 13.0.14 firmware - amdgpu: update VPE 6.1.1 firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update beige goby firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update SDMA 4.4.2 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update renoir firmware - amdgpu: update aldebaran firmware Resolves: RHEL-179825 - Update linux-firmware to latest upstream (RHEL-172252)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - rtl_bt: Add missing rtl8761a_config.bin for RTL8761AU - amdgpu: DMCUB updates for various ASICs - Linux-firmware: Add Dell ISH firmware 581.7783.0 for Intel Panther Lake systems. - qcom: update ADSP firmware for x1e80100 platform - linux-firmware:Add firmware for Lontium LT7911EXC bridge - qcom/x1e80100/dell: mark that qcom/NOTICE.txt is applicable too - qcom: Update CDSP firmware for Kaanapali platform - qcom: vpu: add Gen2 firmware binary for Agatti - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarI core - qcom: Update ADSP firmware for Glymur platform - mediatek MT7925: update bluetooth firmware to 20260414153243 - linux-firmware: update firmware for MT7925 WiFi device - Revert "linux-firmware: Update firmware file for Intel Quasar core" - qcom: Add gpdspr.jsn for qcs8300 platform - ath12k: QCC2072 hw1.0: add to WLAN.COL.1.0.c2-00074-QCACOLSWPL_V1_TO_SILICONZ-1 - ath12k: QCC2072 hw1.0: add board-2.bin - ath12k: IPQ5424 hw1.0: add to WLAN.WBE.1.6-01275-QCAHKSWPL_SILICONZ-1 - ath12k: IPQ5424 hw1.0: add board-2.bin - qcom: Update ADSP firmware for Kaanapali platform - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops (17aa235c 17aa235d) - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00665 to 2.1.0-00666 - amdgpu: DMCUB updates for DCN36 - linux-firmware: Update AMD cpu microcode - powervr: update Imagination Rogue firmware images - qcom: Update ADSP firmware for Kaanapali platform - i915: Xe3LPD DMC v2.34 - i915: Xe3LPD_3002 DMC v2.29 - qcom: Update ADSP firmware for QCM6490 platform - firmware/amdgpu: Update DMCUB fw to Release 0.1.55.0 - mediatek: vpu: drop old sym link Resolves: RHEL-172252 - Update linux-firmware to latest upstream (RHEL-164388)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: Revert Yellow Carp DMUB fw to 0x4000045 - linux-firmware: qcom: sync audioreach firmwares from v1.0.3 build - qcom: consolidate audioreach-tplg firmwares into one location in WHENCE - WHENCE: Fix ISH firmware symlink prefix for Lenovo PTL systems - intel_vpu: Update NPU firmware - Revert "rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673" - nvidia: add acr/bl symlink for booting GSP-RM on GA100 - qcom: add QUPv3 firmware for shikra - xe: Update GUC to v70.60.0 for LNL, BMG, PTL - qcom: update ADSP firmware for sm8750 platform - qcom: update CDSP firmware for glymur platform - cirrus: cs35l41: Add support for new HP laptops - cirrus: cs35l41: Add support for new ASUS laptops - cirrus: cs35l41: Add support for ASUS GZ302EAC and add 15.5dB bincfg - WHENCE: Move Dell remoteproc firmware to correct section - qcom: vpu: add video firmware for SM8450 - cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops - cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops - iwlwifi: add Bz/Sc FW for core103-40 release - iwlwifi: Add Hr/Gf firmware for core103-40 release - iwlwifi: update ty/So/Ma firmwares for core103-40 release - amdgpu: DMCUB updates for various ASICs - xe: Update PTL GSC to v105.0.2.1397 - linux-firmware: add firmware for Moxa mux50u devices - rtl_bt: Update RTL8852B BT USB FW to 0x127C_FD78 - ath11k: WCN6855 hw2.0@nfa765: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866.5-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1 - linux-firmware: update firmware for qat_4xxx devices - linux-firmware: update firmware for qat_402xx devices - linux-firmware: update firmware for qat_420xx devices - linux-firmware: update firmware for an8811hb 2.5G ethernet phy - linux-firmware: qcom: Add FW blobs for DELL XPS13 9345 - amdgpu: DMCUB updates for various ASICs - cirrus: cs35l63: Update firmware for Cirrus Amps for some Dell laptops - cirrus: cs35l63: Fix Cirrus Amp firmware links for some Dell laptops - linux-firmware: Add firmware file for Intel BlazarIW - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - iwlwifi: add Bz/Wh FW for core102-56 release - ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3 - mediatek MT7921: update bluetooth firmware to 20260224111243 - mediatek MT7920: update bluetooth firmware to 20260224111231 - Add LENOVO ISH firmware v5.8.1.7720 for X1 Carbon (Gen 14) and X1 2-in-1 (Gen 11) - linux-firmware: Add ISH firmware file for Intel Wildcat Lake platform - linux-firmware: update firmware for MT7920 WiFi device - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: Update firmware file for Intel Quasar core - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core Resolves: RHEL-164388 - Update linux-firmware to latest upstream (RHEL-154359)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - intel_vpu: Update NPU firmware - amdgpu: DMCUB updates for various ASICs - qcom: add QUPv3 firmware for QCS615 platform - Add LENOVO ISH firmware v5.8.0.7720 for X9-15 2025 - mediatek MT7922: update bluetooth firmware to 20260224103448 - linux-firmware: update firmware for MT7922 WiFi device - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l63: Add firmware for Cirrus CS35L63 for various Dell laptops - linux-firmware: Remove duplicate fw and Rename Lenovo ISH LNLM firmware files accordingly - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel BlazarIGfp2 core - QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00069 - qcom: Update CDSP firmware for QCM6490 platform - linux-firmware: add firmware for Lontium LT8713SX DP hub - linux-firmware: qcom: sync audioreach firmwares from v1.0.2 build - qcom: update ADSP, CDSP firmware for sm8750 platform - qcom: update ADSP dtb.mbn for glymur platform - qca: Update Bluetooth WCN6750 1.1.3-00105 firmware to 1.1.3-00106 - QCA: Update Bluetooth WCN6856 firmware 2.1.0-00659 to 2.1.0-00665 - amdgpu: update PSP 13.0.14 firmware - amdgpu: update GC 9.4.4 firmware - amdgpu: update PSP 13.0.5 firmware - amdgpu: update GC 10.3.6 firmware - amdgpu: update PSP 13.0.0 kicker firmware - amdgpu: update VCN 4.0.0 firmware - amdgpu: update PSP 13.0.0 firmware - amdgpu: update GC 11.0.0 firmware - amdgpu: update SDMA 6.1.3 firmware - amdgpu: update PSP 14.0.5 firmware - amdgpu: update GC 11.5.3 firmware - amdgpu: update beige goby firmware - amdgpu: update SDMA 6.1.2 firmware - amdgpu: update PSP 14.0.4 firmware - amdgpu: update GC 11.5.2 firmware - amdgpu: update dimgrey cavefish firmware - amdgpu: update vangogh firmware - amdgpu: update navy flounder firmware - amdgpu: update PSP 13.0.11 firmware - amdgpu: update GC 11.0.4 firmware - amdgpu: update VCN 4.0.2 firmware - amdgpu: update SDMA 6.0.1 firmware - amdgpu: update PSP 13.0.4 firmware - amdgpu: update GC 11.0.1 firmware - amdgpu: update sienna cichlid firmware - amdgpu: update navi14 firmware - amdgpu: update green sardine firmware - amdgpu: update VCN 4.0.6 firmware - amdgpu: update SDMA 6.1.1 firmware - amdgpu: update PSP 14.0.1 firmware - amdgpu: update GC 11.5.1 firmware - amdgpu: update VCN 5.0.0 firmware - amdgpu: update SMU 14.0.3 firmware - amdgpu: update PSP 14.0.3 firmware - amdgpu: update GC 12.0.1 firmware - amdgpu: update VPE 6.1.0 firmware - amdgpu: update VCN 4.0.5 firmware - amdgpu: update SDMA 6.1.0 firmware - amdgpu: update PSP 14.0.0 firmware - amdgpu: update GC 11.5.0 firmware - amdgpu: update navi12 firmware - amdgpu: update SMU 14.0.2 firmware - amdgpu: update PSP 14.0.2 firmware - amdgpu: update GC 12.0.0 firmware - amdgpu: update renoir firmware - amdgpu: update navi10 firmware - amdgpu: update VCN 4.0.4 firmware - amdgpu: update SDMA 6.0.2 firmware - amdgpu: update PSP 13.0.7 firmware - amdgpu: update GC 11.0.2 firmware - amdgpu: update VCN 4.0.3 firmware - amdgpu: update PSP 13.0.6 firmware - amdgpu: update GC 9.4.3 firmware - amdgpu: update yellow carp firmware - amdgpu: update PSP 13.0.10 firmware - amdgpu: update GC 11.0.3 firmware - amdgpu: update VCN 5.0.1 firmware - amdgpu: update PSP 13.0.12 firmware - amdgpu: update GC 9.5.0 firmware - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - linux-firmware:Renaming the file back for HP EliteBook X Flip G1i - amdnpu: Restore old NPU firmware for compatibility - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - lenovo: remove obsolete ish_lnlm_53c4ffad_2a17559f.bin firmware - linux-firmware: update firmware for MT7902 BT device - linux-firmware: update firmware for MT7902 WiFi device - qcom: vpu: fix SC7280 VPU Gen2 firmware and add compatibility symlink - amdgpu: DMCUB updates for various ASICs - qcom: Update DSP firmware for qcs8300 platform - cirrus: cs35l41: Add Firmware for ASUS Zenbook Laptop using CS35L41 HDA - qcom: Update DSP firmware for sa8775p platform - amdgpu: DMCUB updates for various ASICs - rtw89: 8851b: add format-1 for fw v0.29.41.5 with fw elements - rtw89: 8852a: add format-1 for fw v0.13.36.2 with fw elements - rtw89: 8852bt: add regd and diag_mac and update txpwr to R09 - rtw89: 8852b: update txpwr element to R43 - rtw89: 8852b: add format-2 with v0.29.29.15 and fw elements - Revert "rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2" - xe: Update GUC to v70.58.0 for LNL, BMG, PTL - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6390 hw2.0: update board-2.bin - qcom: Add gpu firmwares for Glymur chipset Resolves: RHEL-154359 - Update linux-firmware to latest upstream (RHEL-147400)   Changes since the last update are noted on items below, copied from   the git changelog of upstream linux-firmware repository. - amdgpu: DMCUB updates for various ASICs - qcom: vpu: add video firmware for Glymur - qcom: add QUPv3 firmware for x1e80100 platform - Bluetooth: Add symbolic links for Intel Solar JfP2/1 firmware variants - Bluetooth: Add symbolic links for Intel Solar firmware variants - Bluetooth: Add symbolic links for Intel Pulsar firmware variants - Bluetooth: Add symbolic links for Intel AX201 firmware variants - ath10k: WCN3990 hw1.0: update board-2.bin - qcom: add ADSP, CDSP firmware for glymur platform - ASoC: tas2783: Add Firmware files for tas2783A - linux-firmware: Update firmware file for Intel Solar core - mediatek MT7921: update bluetooth firmware to 20251223091725 - rtl_bt: Update RTL8822C BT USB and UART firmware to 0x0673 - ath12k: WCN7850 hw2.0: update board-2.bin - ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.6-01243-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - ath11k: QCA6698AQ hw2.1: update board-2.bin - WHENCE: Correct 2 trailing whitespaces - linux-firmware: Add firmware for airoha-npu-7581 driver used for MT7990 offloading - linux-firmware: Add Dell ISH firmware for Intel panther lake systems - amdgpu: DMCUB updates for various ASICs - linux-firmware: update Aeonsemi AS21x1x firmware to 1.9.1 - rtl_nic: add firmware rtl8125cp-1 for RTL8125cp - ice: update DDP LAG package to 1.3.2.0 - cirrus: cs35l56: Add WHENCE links for 17aa233c spkid0 firmware - rtw89: 8922a: update REGD R73-R08, txpwr R46 and element of diag MAC - rtw89: 8852c: update REGD R73-R60, txpwr R82 and element of diag MAC - Update firmware for NPU PHX, STX and STX HALO - qcom: Update ADSP and add CDSP firmware for qcs6490-radxa-dragon-q6a - qcom: Remove ADSP SensorPD json for Radxa Dragon Q6A - amdgpu: DMCUB updates for various ASICs - intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops - cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops - cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops - cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops - Intel IPU7: Update firmware binary for Panther Lake - linux-firmware: update firmware for MT7921 WiFi device - amdgpu: DMCUB updates for various ASICs - linux-firmware: Add firmware file for Intel ScorpiusGfp2 core - linux-firmware: Update firmware file for Intel Scorpius core - linux-firmware: Update firmware file for Intel BlazarIGfP core - linux-firmware: Update firmware file for Intel BlazarI core - linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core - linux-firmware: Update firmware file for Intel BlazarU core - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F - linux-firmware: Add firmware for airoha-npu-7583 driver - iwlwifi: add Bz/Sc FW for core102-56 release - iwlwifi: Add Hr/Gf firmware for core102-56 release - iwlwifi: update ty/So/Ma firmwares for core102-56 release - xe: Add GSC 105.0.2.1301 for PTL - mediatek: rename MT8188 SCP firmware Resolves: RHEL-147400 - Added a patch to fix netinet/sctp.h not to be installed. - Added some fixes for kernel feature detection. - Added some follow-ups for 1.0.18. - Updated to 1.0.18. [1568622] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Added a patch to fix netinet/sctp.h not to be installed. - Added some fixes for kernel feature detection. - Added some follow-ups for 1.0.18. - Updated to 1.0.18. [1568622] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Added a patch to fix netinet/sctp.h not to be installed. - Added some fixes for kernel feature detection. - Added some follow-ups for 1.0.18. - Updated to 1.0.18. [1568622] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Update changelog (#1997064) - Fix dependency specification (#1997064) - Update to the latest branch-1.1, which includes config file fixes (#1997064) - Update the changelog - Fix the branch compatibility - Update to branch-1.1 compatibility - Fixes to avoid assert in the agent state machine - Remove the memory constraint on the event socket buffer (#1554110) - After gating yml updates - Add support for DSCP selectors in APP TLVs (#1704660) - Fix memleak on TLV reception (#1727326) - Fix the OID display (#1614933) - New flag for no sensors added. This flag is used in VM environment to make sensors binaries not fail if no sensors was detected. - Add support for AMD CPU Family 19h - Resolves: rhbz#1846847 - Fix printing CPU info on non-x86 architectures in sensors-detect - Resolves: rhbz#1752854 - Fix printing lm_sensors version in sensors-detect and pwmconfig - Resolves: rhbz#1677414 - Added explicit Requires on lm_sensors-libs - Resolves: rhbz#1706145 - Fixed stale links and outdated info - Resolves: rhbz#1693347 - Detect AMD Rome - Family 17h model 30h - Resolves: rhbz#1650191 - Corrected the License tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - New version - Add detection of AMD Ryzen w/ Vega graphics - Resolves: rhbz#1573399 - Covscan fixes - New flag for no sensors added. This flag is used in VM environment to make sensors binaries not fail if no sensors was detected. - Add support for AMD CPU Family 19h - Resolves: rhbz#1846847 - Fix printing CPU info on non-x86 architectures in sensors-detect - Resolves: rhbz#1752854 - Fix printing lm_sensors version in sensors-detect and pwmconfig - Resolves: rhbz#1677414 - Added explicit Requires on lm_sensors-libs - Resolves: rhbz#1706145 - Fixed stale links and outdated info - Resolves: rhbz#1693347 - Detect AMD Rome - Family 17h model 30h - Resolves: rhbz#1650191 - Corrected the License tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - New version - Add detection of AMD Ryzen w/ Vega graphics - Resolves: rhbz#1573399 - Covscan fixes - New flag for no sensors added. This flag is used in VM environment to make sensors binaries not fail if no sensors was detected. - Add support for AMD CPU Family 19h - Resolves: rhbz#1846847 - Fix printing CPU info on non-x86 architectures in sensors-detect - Resolves: rhbz#1752854 - Fix printing lm_sensors version in sensors-detect and pwmconfig - Resolves: rhbz#1677414 - Added explicit Requires on lm_sensors-libs - Resolves: rhbz#1706145 - Fixed stale links and outdated info - Resolves: rhbz#1693347 - Detect AMD Rome - Family 17h model 30h - Resolves: rhbz#1650191 - Corrected the License tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - New version - Add detection of AMD Ryzen w/ Vega graphics - Resolves: rhbz#1573399 - Covscan fixes RHEL 8.8.0 ERRATUM - Please put lmdb in RHEL 8 CRB - Rebuild - Resolves: rhbz#1972979 - RHEL 8.3.0 ERRATUM - rebase to 0.9.24 - Resolves: rhbz#1817421 - fixed resolves from RPMDIFF - fixed some covscan issues - propagate ldflags for makefile - added explicit Requires for -libs - rebuild - Initial Package - Resolves: rhbz#1692264 - Fix man page wording to pass errors detected by lexgrog. Fixes: 1612764 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Explicitly include <sys/sysmacros.h> due to glibc-headers changes. Definition of major and minor macros is no longer transitively included through <sys/types.h>, hence make it explicit. Ref: https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - /run/lock/lockdev no longer created by systemd (#1324184) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - change _lockdir from /var/lock/lockdev to /run/lock/lockdev - enforce stricter parsing of config files (#2148925) - create /var/log/btmp with mode 0660 (#2061561) - logrotate.8: encourage admins to use the `su` directive (#1759770) - do not abort globbing on broken symlink (#1723265) - fix programming mistakes detected by Coverity Analysis - document the --version option in the logrotate(8) man page (#1611498) - fix license tag to match the source code license - new upstream version 3.14.0 - add explicit BR for the gcc compiler - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - new upstream version 3.13.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - fix sendmail logwatch script to allow 6-digit PIDs - Resolves: rhbz#2046459 - sshd sort failed logins and illegal users by count, not IP address - Resolves: rhbz#2044101 - ignore harmless polkit startup messages - Resolves: rhbz#2043952 - ignore sudo service as it is already reported in secure service - Resolves: rhbz#2043951 - do not treat "RAS: Correctable Errors collector initialized" message as an error - Resolves: rhbz#2043946 - ignore normal "Server ready" startup message from fail2ban - Resolves: rhbz#2043944 - ignore a couple of normal auditd startup messages - Resolves: rhbz#2043942 - patch to logwatch systemd script to add some filtering - Resolves: rhbz#2043109 - fix unrecognized "Disconnected from authenticating user" failed logins - Resolves: rhbz#2043088 - add logwatch-pam-unix.patch - Resolves: rhbz#2043044 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Fix long-standing SIGSEGV bug when using the -s parameter without an argument (RHEL-282148) - Backport tightened path handling from 0.13.1 (CVE-2026-105840) - Remove 'Topipe' feature. (CVE-2026-105841) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - Fix getting size of memory banks <32GiB - Fix the wrong memory information in azure m or mv2 series - Add UUID property to PowerVM LPAR - Fix the gtk3 dependency for lshw-gui instead of lshw - Resolves: rhbz#1905816 - Update to upstream master 56f1de9d1e4d - Resolves: rhbz#1844426 - Update to upstream master 3775782808e8 - B.02.19.2 - Do not show modified time with -notime option - Resolves: rhbz#1733126 - Display proper logical name of network device - Resolves: rhbz#1724087 - Add DIMM running speed and Print dimm rank information - Resolves: rhbz#1725199 - Update to upstream master 6cc0581bc805. - Resolves: rhbz#1664092 - Change python to python3 in selftest/Makefile for the CI gating test. - Resolves: rhbz#1680623 - Resolves: RHEL-91281 - Fix getting size of memory banks <32GiB - Fix the wrong memory information in azure m or mv2 series - Add UUID property to PowerVM LPAR - Fix the gtk3 dependency for lshw-gui instead of lshw - Resolves: rhbz#1905816 - Update to upstream master 56f1de9d1e4d - Resolves: rhbz#1844426 - Update to upstream master 3775782808e8 - B.02.19.2 - Do not show modified time with -notime option - Resolves: rhbz#1733126 - Display proper logical name of network device - Resolves: rhbz#1724087 - Add DIMM running speed and Print dimm rank information - Resolves: rhbz#1725199 - Update to upstream master 6cc0581bc805. - Resolves: rhbz#1664092 - Rebase to lsof-4.93.2 - Upstream moved to GitHub (original unreachable) and tarball structure changed - Manpage patch needed to reflect the tarball changes - Resolves: rhbz#1778228 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - resolves: #1560993 updated to 4.91 - resolves: #1574669 use tirpc library for rpc - Use standard Fedora build flags (bug #1548552) - resolves: #1545963 updated to 4.90 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Only ship end user useful docs, don't ship bits for building - Fix WWN ID truncation (#1981038) - Fix an unitialized variable (Covscan) - Upgrade to 0.32 upstream snapshot (#1855766) - Fix NVMe device parsing (#1687841, #1845977) - Fix WWN string reporting (#1846559) - Implement SCSI identifier sort priority (#1846566) - Upgrade to 0.30 release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - update to 0.28 - Fix segfault in getlocal and setlocal (#1880445) - Fix use after free in lua_upvaluejoin (#1670167) - move lua(abi) provide to -libs - add fix for bug 6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Unnecessary change to RISC-V macros in GCC requires change in luaconf.h. - fix pkgconfig provides (bz1519921) - apply known upstream bugfixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Refactor macros to a more common syntax - Use rpm's build-in lua for macros - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Exit with error when --devicesfile used does not exist. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Allow integrity to use multiple segments for metadata. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Exit with error when --devicesfile used does not exist. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Allow integrity to use multiple segments for metadata. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Exit with error when --devicesfile used does not exist. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Allow integrity to use multiple segments for metadata. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Exit with error when --devicesfile used does not exist. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Allow integrity to use multiple segments for metadata. - Fix vgchange exit code when lvmlockd is not running and no change is done. - Fix incomplete pvmove write bad metadata requiring manual intervention. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix dmeventd blocking on shutdown. - Force exit dmeventd when /run/nologin is present. - Fix multisegment RAID1 allocator using one disk for both legs. - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync. - Add warning message when mirror images have (r)efresh bit set. - Document lv_attr volume type bit (g) for raid+integrity in lvs(8). - Fix error paths in lvm_import_vdo.sh. - Fix handling of devices with symlinks in lvm_import_vdo.sh. - Fix verbose option in lvm_import_vdo.sh. - Improve VDO support. - Fix handling of invalid values passed to vdo_block_map_era_length. - Fix [vdo_]use_compression options. - Fix vgimportdevices operating on incomplete VGs fails when nothing to import. - Fix message processing on thin-pool extension leaving devices behind. - Fix lvm crash when recreating PV with UUID of a missing PV. - Fix lvconvert --type vdo-pool with --test should not write signature. - Use correect profile in lvmdbusd preventing messages in JSON output. - Fix effect of setting multipath_component_detection to 0. - Fix memory corruption due to an integer overflow _ Resolves: CVE-2021-3520 - Rebuilding with the new gating tests - Related: 1840046 - Rebase to 1.8.3 - Resolves: #1821237 - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 1.8.1.2 - Update to 1.8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix a renamed variable in one of the patches - Since the variable was used in an assert, the regular build did not fail, but the QA builds did. - Related: RHEL-87362 - Fix CVE-2019-17543 - Resolves: RHEL-87362 - Fix memory corruption due to an integer overflow _ Resolves: CVE-2021-3520 - Rebuilding with the new gating tests - Related: 1840046 - Rebase to 1.8.3 - Resolves: #1821237 - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 1.8.1.2 - Update to 1.8.0 - Fix memory corruption due to an integer overflow _ Resolves: CVE-2021-3520 - Rebuilding with the new gating tests - Related: 1840046 - Rebase to 1.8.3 - Resolves: #1821237 - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 1.8.1.2 - Update to 1.8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix a renamed variable in one of the patches - Since the variable was used in an assert, the regular build did not fail, but the QA builds did. - Related: RHEL-87362 - Fix CVE-2019-17543 - Resolves: RHEL-87362 - Fix memory corruption due to an integer overflow _ Resolves: CVE-2021-3520 - Rebuilding with the new gating tests - Related: 1840046 - Rebase to 1.8.3 - Resolves: #1821237 - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 1.8.1.2 - Update to 1.8.0 - Fix memory corruption due to an integer overflow _ Resolves: CVE-2021-3520 - Rebuilding with the new gating tests - Related: 1840046 - Rebase to 1.8.3 - Resolves: #1821237 - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 1.8.1.2 - Update to 1.8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix a renamed variable in one of the patches - Since the variable was used in an assert, the regular build did not fail, but the QA builds did. - Related: RHEL-87362 - Fix CVE-2019-17543 - Resolves: RHEL-87362 - Fix memory corruption due to an integer overflow _ Resolves: CVE-2021-3520 - Rebuilding with the new gating tests - Related: 1840046 - Rebase to 1.8.3 - Resolves: #1821237 - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 1.8.1.2 - Update to 1.8.0 - Added build notes to AS generated objects Resolves: rhbz#1630594 - Dropped unused patches - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - remove -O1 workaround, add patch by Jakub Jelinek instead (bug #1309225) - use -O1 compiler optimizations on ppc64le (bug #1309225) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Link libminilzo with -z now - Added build notes to AS generated objects Resolves: rhbz#1630594 - Dropped unused patches - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - remove -O1 workaround, add patch by Jakub Jelinek instead (bug #1309225) - use -O1 compiler optimizations on ppc64le (bug #1309225) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Link libminilzo with -z now - Added build notes to AS generated objects Resolves: rhbz#1630594 - Dropped unused patches - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - remove -O1 workaround, add patch by Jakub Jelinek instead (bug #1309225) - use -O1 compiler optimizations on ppc64le (bug #1309225) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Link libminilzo with -z now - add explicit BR for the gcc compiler - use https:// in URL and Source - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Added patch from openSUSE to fix building using GCC 6 (#1307760) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Added patch by Khem Raj to use static inlines as the external inline definition has changed with GCC 5 (to fix ppc64 builds) - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Work around change in glibc Resolves: #1611732 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Add missing %license macro Resolves: #1418521 - Update to m4-1.4.18 Resolves: #1409340 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Fix m4 FTBFS in rawhide Resolves: #1239665 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Update to 2.1.45 - Output nginx-mimetypes subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Update to 2.1.46 - Add build requirement for perl - Update to 2.1.47 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 2.1.48 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - fix important Covscan defects resolves: #1602614 - switch to OpenSSL - add missing gcc build dependency - Use LDFLAGS from redhat-rpm-config - fix also quoted-printable encoded words related: #1494559, #1515591 - add missing linear whitespace to encsplit patch resolves: #1515591 - fix multi-byte encoded line-folding resolves: #1494559 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix UTC offset calculation in Date headers; sendout.c change based on a patch proposed by Mason Loring Bliss - Resolves: RHEL-232782 - fix important Covscan defects resolves: #1602614 - switch to OpenSSL - add missing gcc build dependency - Use LDFLAGS from redhat-rpm-config - fix also quoted-printable encoded words related: #1494559, #1515591 - add missing linear whitespace to encsplit patch resolves: #1515591 - fix multi-byte encoded line-folding resolves: #1494559 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Allow -j in MAKEFLAGS. BZ #2004246 - Use a non-blocking read with pselect to avoid hangs. BZ #1774790 - Add -k to make check to insure that all tests are run even if failures occur. - Do not enable Guile support. (#1569105) - Fix build failure caused by automake versioning differences related to the glob changes. (#1589769) - Fix testing failure due to Perl changes related to expanding paths. - Fix wrong assumptions of glibc's glob internals - Add upstream patch to fix incorrect use of glibc 2.27 glob internals. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Add missing %license macro - Allow -j in MAKEFLAGS. BZ #2004246 - Use a non-blocking read with pselect to avoid hangs. BZ #1774790 - Add -k to make check to insure that all tests are run even if failures occur. - Do not enable Guile support. (#1569105) - Fix build failure caused by automake versioning differences related to the glob changes. (#1589769) - Fix testing failure due to Perl changes related to expanding paths. - Fix wrong assumptions of glibc's glob internals - Add upstream patch to fix incorrect use of glibc 2.27 glob internals. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Add missing %license macro - schedule interrupted cache update for the next boot, instead of blocking system reboot/shutdown resolves #1874010 - avoid multilib difference in man-db-manual.ps - get rid of hardcoded path related: #1607005 - fix important Covscan defects resolves: #1607005 - Rebuild with fixed binutils - Rebuilt for gdbm - Avoid noisy output from man-db-cache-update triggers - fix segmentation fault caused by 'man -D?' resolves: #1495507 - rebuild with gdbm-1.14 - fix failure of man-db-cache-update service when configured not to run resolves: #1526715 - allow configuration of man-db-cache-update service through sysconfig resolves: #1514909 - allow configuration of man-db-cache-update service through sysconfig resolves: #1514909 - fix failure of man-db-cache-update service when configured not to run resolves: #1526715 - rebuild with gdbm-1.14 - fix segmentation fault caused by 'man -D?' resolves: #1495507 - Avoid noisy output from man-db-cache-update triggers - Rebuilt for gdbm - Rebuild with fixed binutils - fix important Covscan defects resolves: #1607005 - avoid multilib difference in man-db-manual.ps - get rid of hardcoded path related: #1607005 - schedule interrupted cache update for the next boot, instead of blocking system reboot/shutdown resolves #1874010 - remove rpc.3 and xdr.3 man pages documenting deprecated glibc RPC implementation resolves: #1980919 - proc.5: document /proc/[pid]/status Speculation_Store_Bypass field resolves: #1623808 - resolv.conf.5: document no-reload option resolves: #1623806 - host.conf.5: clarify glibc versions in which spoof options were removed resolves: #1615294 - remove man pages deprecated by libxcrypt - add patches from MPO - remove/adjust pages for syscalls deprecated on aarch64 - update to 4.15 resolves #1541376 - update to 4.14 - update to 4.13 resolves #1492258 - update to 4.12 resolves #1473875 - Revert "mcstransd select correct colour range." (#1731451) - Fix mcstrans secolor examples (#1731451) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK and USE_AFTER_FREE coverity scan defects - Update to mcstrans-2.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Revert "mdadm: remove container_enough logic" - Resolves RHEL-26274 - Fix raid0 layout display problem - Resolves RHEL-8372 - Fix rpminspect check error from gating test - Resolves RHEL-15388 - Update extraversion again - Resolves RHEL-15388 - Update extraversion - Resolves RHEL-15388 - Update to latest upstream - Resolves RHEL-15388 - Update to latest upstream and fix mdcheck service bug - Resolves rhbz#2116418, rhbz#2150862, rhbz#2159584 - Update to latest to upstream to fix some bugs - Resolves rhbz#2149307, rhbz#2149473, rhbz#2151208, rhbz#2127096 - Keep udev rule close to upstream and update to latest upstream - Resolves rhbz#1991596, rhbz#2129088, rhbz#2107150 - Update mdadm to latest upstream - Resolves rhbz#2092326 - Remove name= support in config file - Resolves RHEL-45608 - Fix update_subarray on active volume - missing patch - Resolves RHEL-20833 - Revert "mdadm: remove container_enough logic" - Resolves RHEL-26274 - Fix raid0 layout display problem - Resolves RHEL-8372 - Fix rpminspect check error from gating test - Resolves RHEL-15388 - Update extraversion again - Resolves RHEL-15388 - Update extraversion - Resolves RHEL-15388 - Update to latest upstream - Resolves RHEL-15388 - Update to latest upstream and fix mdcheck service bug - Resolves rhbz#2116418, rhbz#2150862, rhbz#2159584 - Update to latest to upstream to fix some bugs - Resolves rhbz#2149307, rhbz#2149473, rhbz#2151208, rhbz#2127096 - alloc superblock in Assemble - Resolves: RHEL-82267 - increase md device name number limit - Resolves: RHEL-97802 - enable sync file for udev rules - Resolves: RHEL-59180 - Remove name= support in config file - Resolves RHEL-45608 - Fix update_subarray on active volume - missing patch - Resolves RHEL-20833 - Revert "mdadm: remove container_enough logic" - Resolves RHEL-26274 - Fix raid0 layout display problem - Resolves RHEL-8372 - Fix rpminspect check error from gating test - Resolves RHEL-15388 - Update extraversion again - Resolves RHEL-15388 - Update extraversion - Resolves RHEL-15388 - Fix 'device ready' notification for udev during container incremental assembly. - alloc superblock in Assemble - Resolves: RHEL-82267 - increase md device name number limit - Resolves: RHEL-97802 - enable sync file for udev rules - Resolves: RHEL-59180 - Remove name= support in config file - Resolves RHEL-45608 - Fix update_subarray on active volume - missing patch - Resolves RHEL-20833 - Revert "mdadm: remove container_enough logic" - Resolves RHEL-26274 - Fix raid0 layout display problem - Resolves RHEL-8372 - Fix rpminspect check error from gating test - Resolves RHEL-15388 - Update extraversion again - Resolves RHEL-15388 - Add missing tests directory - Rebase to latest upstream(e2d91c4823b) - Revert bz2107730 - Rebase to latest upstream(813c2feaa2f) - Fix memstrack failure with large memory hole - Fix TUI not quiting issue - Bump to latest upstream version, fix some issues and introduce unit test - Bump to latest upstream version to fix multiple bugs - Bump to latest upstream version to fix some other issue found in early testing - Bump to latest upstream version to fix problems found by rpmdiff - Revert: Don't set default value of "assumeyes" to TRUE - Update to 3.8.0 - Don't set default value of "assumeyes" to TRUE - Support for user confirmation and assumeyes, assumeno, defaultyes - Add commands: distro-sync, makecache - Add subcommands support - Add support for command aliases - Added alias "update" to "upgrade" command - Relicense to GPLv2+ - Add support for setting allow_vendor_change - [download] Support for "--resolve", "--alldeps" and "--archlist=" arguments - [download] several optimizations - Support "--setopt=keepcache=0/1" - Extend "--setopt" to support repository options - Print info about obsoleted packages before transaction (RhBug:1855542) - Patch: Add support for setting a platform module ID - Rename "update" command to "upgrade", "update" remain as compatibility alias - Patch: Add module enable/disable/reset command - Update to 3.4.0 - Fix: do not download metadata in remove command - Add reinstall command - Add "--setopt=tsflags=test" support - Add "--setopt=reposdir=<path>" and "--setopt=varsdir=<path1>,<path2>,..." support - Add "--config=<path_to_config_file>" support - Add "--disableplugin", "--enableplugin" support (RhBug:1781126) - Add "--noplugins" support - Add "--setopt=cachedir=<path_to_cache_directory>" support - Add "--installroot=<path_to_installroot_directory>" support - Add "--refresh" support - Support "install_weak_deps" conf option and "--setopt=install_weak_deps=0/1" - Respect reposdir from conf file - Respect "metadata_expire" conf file opton (RhBug:1771147) - [repolist] Print padding spaces only if output is terminal - Fix: Don't print lines with (null) in transaction report (RhBug:1691353) - Add dependency on libdnf - Allow downgrade for all transactions microdnf does (RhBug:1725863) - Add repolist command (RhBug:1584952) - Add repoquery command (RhBug:1769245) - Fix issues found by Coverity Scan - Resolves: rhbz#1602618 - Corrected the License tag - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Add gcc to BuildRequires - Cleanup spec - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt to new upstream version 2.7.1 fixes rhbz#1443071 and rhbz#1443129 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - fix alternative paths (#1636076) - add alternatives switching with ksh (#1636076) - Build flags injection is only partially successful (#1543842) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Upgrade to 56c - Upgrade to 56b - Upgrade to 56 (#1479800) - fixes wait exit codes of co-processes when run in interactive mode (#1479320) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Upgrade to 55 - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - add correct systemd requirements for scriptlets (using %systemd_requires) - start timer after the installation (#1278587) - make mlocate-updatedb.service of the type simple, systemd will then not wait for its completion (#1282232) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - migrate from cron job to systemd timer - prune ceph filesystem (#1223582) - Update to latest upstream git snapshot 20150421git - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Update to latest upstream release 20151214 - Update to latest upstream git snapshot 20170105git - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to latest upstream snapshot 20170310 - Spec cleanups, use %license - Update to latest upstream release - Update to latest upstream release - Change /usr/bin/python2-for-tests to python2 - Rebuild for CET notes - Resolves: #1657318 - Update to 52.9.0 - safeguard against linking against bundled nss Related: #1563708 - Update to 52.8.0 - Fix the build on ppc - Disable JS Helper threads on ppc64le (#1523121) - Update to 52.7.3 - Update to 52.7.2 - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 52.6.0 - SpiderMonkey tests have regressions on %{power64}, too - Change /usr/bin/python2-for-tests to python2 - Update enddianness.patch with more s390x fixes - Enable tests on s390x again - Resolves: #1803824 - Fix multilib conflicts in js-config.h - Backport patches for s390x support - Resolves: #1746889 - Update to 60.9.0 - Enable gating - Update to 60.7.0 - Backport two Firefox 61 patches and allow compiler optimizations on aarch64 - Update to 60.6.1 - Re-enable null pointer gcc optimization - Update to MPFR version 3.1.6 - Use autosetup specfile macro for applying patches (patches 1 and 2 applied) - Removed iconv calls, as they were breaking .info files, which are now unicode resolves #1299649 - Other minor cleanups - BuildRequire gcc per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Examples should be in devel - Minor cleanups - Add missing %license macro - rebase - Rebase - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - drop support for F<20 - Add dependency on glibc-gconv-extra mtools need codepage 850, which was split from glibc into a subpackage. (Fedora bug #2021637, RHEL bug #2073842) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - fix license handling - fix name of the gating config file (#1681042) - don't set setuid and filecaps manually (#1633182) - Rebase to 0.92 (#1458265) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Don't include git revision in version string - One more version bump for the same reason (hopefully last one) - Rebuilt because previous build doesn't have correct dist-tag - Rebase to latest upstream (#1365128) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - new upstream release - new upstream release - new upstream release - fix crash when using word completion - new upstream release - fix crash of 'nano --restrict' when <Insert> is pressed (#1558532) - new upstream release - add explicit BR for the gcc compiler - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - new upstream release - fix incomplete backport of the fix for the emergency file replacement vulnerability (RHEL-35236) - fix emergency file replacement vulnerability (RHEL-35236) - new upstream release - new upstream release - new upstream release - fix crash when using word completion - new upstream release - fix crash of 'nano --restrict' when <Insert> is pressed (#1558532) - new upstream release - add explicit BR for the gcc compiler - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - fix tput to accept -x option (#1916340) - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594) - handle missing character after backslash in terminfo entry (CVE-2019-17595) - disable stripping on program installation (#1665177) - rebuild with latest gcc (#1648947) - fix crash in parsing of terminfo use capability (CVE-2018-10754) - add gcc-c++ to build requirements - update to 6.1-20180224 - add gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 6.1-20180129 - use macro for ldconfig scriptlets - update to 6.1-20180127 - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - fix tput to accept -x option (#1916340) - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594) - handle missing character after backslash in terminfo entry (CVE-2019-17595) - disable stripping on program installation (#1665177) - rebuild with latest gcc (#1648947) - fix crash in parsing of terminfo use capability (CVE-2018-10754) - add gcc-c++ to build requirements - update to 6.1-20180224 - add gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 6.1-20180129 - use macro for ldconfig scriptlets - update to 6.1-20180127 - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - fix tput to accept -x option (#1916340) - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594) - handle missing character after backslash in terminfo entry (CVE-2019-17595) - disable stripping on program installation (#1665177) - rebuild with latest gcc (#1648947) - fix crash in parsing of terminfo use capability (CVE-2018-10754) - add gcc-c++ to build requirements - update to 6.1-20180224 - add gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 6.1-20180129 - use macro for ldconfig scriptlets - update to 6.1-20180127 - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - fix tput to accept -x option (#1916340) - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594) - handle missing character after backslash in terminfo entry (CVE-2019-17595) - disable stripping on program installation (#1665177) - rebuild with latest gcc (#1648947) - fix crash in parsing of terminfo use capability (CVE-2018-10754) - add gcc-c++ to build requirements - update to 6.1-20180224 - add gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 6.1-20180129 - use macro for ldconfig scriptlets - update to 6.1-20180127 - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - fix tput to accept -x option (#1916340) - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594) - handle missing character after backslash in terminfo entry (CVE-2019-17595) - disable stripping on program installation (#1665177) - rebuild with latest gcc (#1648947) - fix crash in parsing of terminfo use capability (CVE-2018-10754) - add gcc-c++ to build requirements - update to 6.1-20180224 - add gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 6.1-20180129 - use macro for ldconfig scriptlets - update to 6.1-20180127 - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - fix tput to accept -x option (#1916340) - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594) - handle missing character after backslash in terminfo entry (CVE-2019-17595) - disable stripping on program installation (#1665177) - rebuild with latest gcc (#1648947) - fix crash in parsing of terminfo use capability (CVE-2018-10754) - add gcc-c++ to build requirements - update to 6.1-20180224 - add gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 6.1-20180129 - use macro for ldconfig scriptlets - update to 6.1-20180127 - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - fix tput to accept -x option (#1916340) - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594) - handle missing character after backslash in terminfo entry (CVE-2019-17595) - disable stripping on program installation (#1665177) - rebuild with latest gcc (#1648947) - fix crash in parsing of terminfo use capability (CVE-2018-10754) - add gcc-c++ to build requirements - update to 6.1-20180224 - add gcc to build requirements - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 6.1-20180129 - use macro for ldconfig scriptlets - update to 6.1-20180127 - Another bump to fix gating tests - Resolves: rhbz#2141031 - Bump release for a rebuild - Resolves: rhbz#2141031 - Sync test harness with kernel updates. (Jeff Moyer) - Resolves: rhbz#2141031 - Pull in fixes from upstream v72 and v73 (Jeff Moyer) - Fix enable-namespace all reporting errors incorrectly - Add support for inject-smart on papr scm - Related: bz#2090190 bz#1986185 bz#2040074 - Rebuild with latest json-c version - Related: bz#2021816 - Get rid of confusing message when deleting all namespaces - Related: bz#1782182 - Update to v71.1 to pull in ppc support. - Related: bz#1782182 - Fix up botched change to nvdimm-security.conf (Jeff Moyer) - Related: bz#1724531 - Rebase to v67. This brings in the following features: - support for the 'security frozen' sysfs attribute - support for using pmem as system ram - various cleanup and bug fixes - Fix load-keys failure in initramfs (Jeff Moyer) - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889 - Rebase to v65. - Resolves: bz#1665407 bz#1634349 - Another bump to fix gating tests - Resolves: rhbz#2141031 - Bump release for a rebuild - Resolves: rhbz#2141031 - Sync test harness with kernel updates. (Jeff Moyer) - Resolves: rhbz#2141031 - Pull in fixes from upstream v72 and v73 (Jeff Moyer) - Fix enable-namespace all reporting errors incorrectly - Add support for inject-smart on papr scm - Related: bz#2090190 bz#1986185 bz#2040074 - Rebuild with latest json-c version - Related: bz#2021816 - Get rid of confusing message when deleting all namespaces - Related: bz#1782182 - Update to v71.1 to pull in ppc support. - Related: bz#1782182 - Fix up botched change to nvdimm-security.conf (Jeff Moyer) - Related: bz#1724531 - Rebase to v67. This brings in the following features: - support for the 'security frozen' sysfs attribute - support for using pmem as system ram - various cleanup and bug fixes - Fix load-keys failure in initramfs (Jeff Moyer) - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889 - Rebase to v65. - Resolves: bz#1665407 bz#1634349 - fix crash when configured as proxy - issue 82 (RHEL-14454) - log once truncating issue (RHEL-13597) - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26650) - backport MemAvailable report from upstream (RHEL-21780) - fix sendmsg error code for new kernel (#2185787) - fix memory leak due of proc file creating (#2105957) - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905) - fix memory leak when ipv6 disable set to 1 (#2151537) - fix proxy timeout issue (#2160723) - backport two memory leaks from upstream (#2134635) - fix segfault with error on subcontainer (#2051370) - fix dereferencing null pointer (#2021403) - net-snmp-cert gencert create SHA512 (#1908331) - update engineTime when sending traps (#1973252) - prevent parsing IP address twice (#1768908) - add support for digests detected from ECC certs (#1919714) - fix broken ErrorMsg at ucd-snmp (#1933150) - add support for intermediate certs (#1914656) - fix crash of certs with longer extension (#1908718) - fix use after free issue (RHEL-64696) - fix crash when configured as proxy - issue 82 (RHEL-14454) - log once truncating issue (RHEL-13597) - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26650) - backport MemAvailable report from upstream (RHEL-21780) - fix sendmsg error code for new kernel (#2185787) - fix memory leak due of proc file creating (#2105957) - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905) - fix memory leak when ipv6 disable set to 1 (#2151537) - fix proxy timeout issue (#2160723) - backport two memory leaks from upstream (#2134635) - fix segfault with error on subcontainer (#2051370) - fix dereferencing null pointer (#2021403) - net-snmp-cert gencert create SHA512 (#1908331) - update engineTime when sending traps (#1973252) - fix engine order of evaluation (RHEL-116089) - fix use after free issue (RHEL-64696) - fix crash when configured as proxy - issue 82 (RHEL-14454) - log once truncating issue (RHEL-13597) - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26650) - backport MemAvailable report from upstream (RHEL-21780) - fix sendmsg error code for new kernel (#2185787) - fix memory leak due of proc file creating (#2105957) - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905) - fix memory leak when ipv6 disable set to 1 (#2151537) - fix proxy timeout issue (#2160723) - backport two memory leaks from upstream (#2134635) - fix segfault with error on subcontainer (#2051370) - fix dereferencing null pointer (#2021403) - net-snmp-cert gencert create SHA512 (#1908331) - fix out of bound access (RHEL-137501) - perl modern auth enablement (RHEL-137310) - fix engine order of evaluation (RHEL-116089) - fix use after free issue (RHEL-64696) - fix crash when configured as proxy - issue 82 (RHEL-14454) - log once truncating issue (RHEL-13597) - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26650) - backport MemAvailable report from upstream (RHEL-21780) - fix sendmsg error code for new kernel (#2185787) - fix memory leak due of proc file creating (#2105957) - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905) - fix memory leak when ipv6 disable set to 1 (#2151537) - fix proxy timeout issue (#2160723) - backport two memory leaks from upstream (#2134635) - fix segfault with error on subcontainer (#2051370) - fix dereferencing null pointer (#2021403) - Resolves: #1711119 - netstat says "packetes" instead of "packets" - Resolves: #1670355 - Exit code on wrong parameter is zero for many net-tools binaries - Resolves: #1807989 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits - Resolves: #1607010 - Please review important issues found by covscan - Resolves: 1557470 - netstat -i cut's interface names - Resolves: 1566084 - netstat -agn only shows 10 character interface name for IPv4 addressing - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Link mii-diag with $RPM_LD_FLAGS - removing dependencies on systemd-units from spec file - Resolves: #1478868 - netstat(8) portion on Timer needs writing - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - ci: Update `.packit.yml` to run on `c8s` - ci: Use Differential ShellCheck action - ifup-routes: Revert quotes - ifup-routes: Use `ip replace` only on type `route` - ci: introduce GA ci from master to rhel8-branch - ci: Setup packit for RHEL8 branch - ci: Get rid of old ci files (travis and zanata) - rename_device: also support dracut-style kernel cmdline configuration - ifup-routes: Log when using `ip $type replace` - ifup-routes: Use `ip route repace` to avoid race - doc: Document ARPING_WAIT and ARPING_UPDATE_WAIT - network scripts: Avoid infinite loop of arping - network: fix condition in set_link_up() - doc: Documents ifcfg option LINKSTATUS - network: fix set_link_up() - network: add option to keep the link down - makefile: Use rpmdev-bumpspec's legacy date option - Allow updating rfkill switch status while in readonly root mode - service: Prevent variables from globbing - Allow updating mlocate.db while in readonly root mode - Add optional 'dev' keyword - man: add ifdown.8 - ci: Update `.packit.yml` to run on `c8s` - ci: Use Differential ShellCheck action - ifup-routes: Revert quotes - ifup-routes: Use `ip replace` only on type `route` - ci: introduce GA ci from master to rhel8-branch - ci: Setup packit for RHEL8 branch - ci: Get rid of old ci files (travis and zanata) - rename_device: also support dracut-style kernel cmdline configuration - ifup-routes: Log when using `ip $type replace` - ifup-routes: Use `ip route repace` to avoid race - doc: Document ARPING_WAIT and ARPING_UPDATE_WAIT - network scripts: Avoid infinite loop of arping - network: fix condition in set_link_up() - doc: Documents ifcfg option LINKSTATUS - network: fix set_link_up() - network: add option to keep the link down - makefile: Use rpmdev-bumpspec's legacy date option - Allow updating rfkill switch status while in readonly root mode - service: Prevent variables from globbing - Allow updating mlocate.db while in readonly root mode - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild -New upstream version - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - New upstream version - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Add patch to support libnl3 - Use %license - Cleanup spec - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Backport CVE-2021-3580 from upstream 3.7.3 release (#1967990) - Enable CTR mode optimization when the block size is 16 - Backport powerpc64 optimization patches from upstream (#1855228) Patch from Christopher M. Riedl. - Fix patch application - Port fixes for potential miscalculation in ecdsa_verify (#1942925) - Enable Intel CET support (#1737542) - New upstream release - Cover the gaps in annotation coverage for assembler sources - Add .hmac checksums for FIPS mode integrity checking - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release - ci: Update `.packit.yml` to run on `c8s` - ci: Use Differential ShellCheck action - ifup-routes: Revert quotes - ifup-routes: Use `ip replace` only on type `route` - ci: introduce GA ci from master to rhel8-branch - ci: Setup packit for RHEL8 branch - ci: Get rid of old ci files (travis and zanata) - rename_device: also support dracut-style kernel cmdline configuration - ifup-routes: Log when using `ip $type replace` - ifup-routes: Use `ip route repace` to avoid race - doc: Document ARPING_WAIT and ARPING_UPDATE_WAIT - network scripts: Avoid infinite loop of arping - network: fix condition in set_link_up() - doc: Documents ifcfg option LINKSTATUS - network: fix set_link_up() - network: add option to keep the link down - makefile: Use rpmdev-bumpspec's legacy date option - Allow updating rfkill switch status while in readonly root mode - service: Prevent variables from globbing - Allow updating mlocate.db while in readonly root mode - Add optional 'dev' keyword - man: add ifdown.8 - ci: Update `.packit.yml` to run on `c8s` - ci: Use Differential ShellCheck action - ifup-routes: Revert quotes - ifup-routes: Use `ip replace` only on type `route` - ci: introduce GA ci from master to rhel8-branch - ci: Setup packit for RHEL8 branch - ci: Get rid of old ci files (travis and zanata) - rename_device: also support dracut-style kernel cmdline configuration - ifup-routes: Log when using `ip $type replace` - ifup-routes: Use `ip route repace` to avoid race - doc: Document ARPING_WAIT and ARPING_UPDATE_WAIT - network scripts: Avoid infinite loop of arping - network: fix condition in set_link_up() - doc: Documents ifcfg option LINKSTATUS - network: fix set_link_up() - network: add option to keep the link down - makefile: Use rpmdev-bumpspec's legacy date option - Allow updating rfkill switch status while in readonly root mode - service: Prevent variables from globbing - Allow updating mlocate.db while in readonly root mode - teamd: do no remove the ports on shutdown with -N [2148856] - teamd: stop iterating callbacks when a loop restart is requested [2148855] - libteamdctl: validate the bus name before using it [2065227] - Revert "teamd: Disregard current state when considering port enablement" [1874001] - 1.31 release - utils/bond2team: remove TYPE in ifcfg file [1858518] - utils/bond2team: keep delivering config to file if stdout not supplied [1858518] - teamd/lacp: silence ignore none LACP frames - Send LACP PDU right after the Actor state has been changed - Skip setting the same hwaddr to a lag port if not needed - Make all netlink socket RCVBUF sizes configurable - Don't return an error when timerfd socket return 0 - Fix ifinfo_link_with_port race condition with newlink - teamd: fix possible race in master ifname callback - 1.30 release - teamd: Disregard current state when considering port enablement [1851460] - teamd: fix ctx->hwaddr value assignment [1838952] - gating: fix the invalid ovs rpm link with latest version [1782427] - gating: fix the invalid ovs rpm link [1782427] - teamd/lacp: fix segfault due to NULL pointer dereference [1758073] - teamd: fix build error in expansion of macro teamd_log_dbgx [1758073] - teamd: update ctx->hwaddr after setting team dev to new hwaddr - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758073] - man teamd.conf: update some parameter default values [1732587] - 1.29 release - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops - initscripts: fix if/fi align - teamd: fix a json object memleak in get_port_obj() [1767685] - libteam: set netlink event socket as non-blocking [1684389] - libteam: double NETLINK_RCVBUF to fix -ENOMEM error - teamd: add a default value 1000 for link_watch.interval - gating: run VM with more RAM [1722449] - don't ignore CFLAGS when building snack (#1757093) - move snack provides to python3-newt subpackage (#1640153) - fix radio button selection check in snack (#1714517) - don't build python2 subpackage on rhel >= 8 - rename newt-python3 subpackage to python3-newt - build python3 subpackage unconditionally - don't use unversioned python_sitearch macro - drop static subpackage - use macro for ldconfig scriptlets - add gcc to build requirements - fix description of python2-newt - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Add Provides for the old name without %_isa - Python 2 binary package renamed to python2-newt See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Covscan Scan: Wrong Check of Return Value (bz 2151966) - Covscan Scan: Clang (experimental) (bz 2151971) - mountd: Check 'nfsd/clients' directory presence (bz 2123073) - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2100395) - rpcctl: 'PosixPath' object has no attribute 'readlink' (bz 2087187) - rpcctl: Remove subparser required option as that was added in py3.7 (bz 2087187) - Create the nfsrahead command (bz 1946283) - rpcctl: Add a rpcctl.py tool (bz 2087187) - manpage: Add a description of the softreval/nosoftreval (bz 2073476) - libnfsidmap: Turn off default verbosity (bz 2057612) - mount.nfs: Fix Typo auto negotiating code. (bz 1946346) - update rdirplus documentation on nfs(5) man page (RHEL-91253) - mountstats fixes (RHEL-90242) - nfsiostat fixes (RHEL-90242) - gssd: unconditionally use krb5_get_init_creds_opt_alloc (RHEL-62422) - gssd: do not use krb5_cc_initialize (RHEL-62422) - gssd.man: add documentation for use-gss-proxy (RHEL-13085) - Covscan Scan: Wrong Check of Return Value (bz 2151966) - Covscan Scan: Clang (experimental) (bz 2151971) - mountd: Check 'nfsd/clients' directory presence (bz 2123073) - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2100395) - rpcctl: 'PosixPath' object has no attribute 'readlink' (bz 2087187) - rpcctl: Remove subparser required option as that was added in py3.7 (bz 2087187) - Add requires for selinux-policy (RHEL-127095) - mountd: Minor refactor of get_rootfh() (RHEL-127095) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127095) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127095) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127095) Resolves: CVE-2025-12801 - gssd: protect kerberos ticket cache access (RHEL-103627) - nfsrahead: modify get_device_info logic (RHEL-108924) - update rdirplus documentation on nfs(5) man page (RHEL-91253) - mountstats fixes (RHEL-90242) - nfsiostat fixes (RHEL-90242) - gssd: unconditionally use krb5_get_init_creds_opt_alloc (RHEL-62422) - gssd: do not use krb5_cc_initialize (RHEL-62422) - gssd.man: add documentation for use-gss-proxy (RHEL-13085) - Covscan Scan: Wrong Check of Return Value (bz 2151966) - Covscan Scan: Clang (experimental) (bz 2151971) - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-150760) - nfsrahead: zero-initialise device_info struct (RHEL-150760) - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-150760) - Add requires for selinux-policy (RHEL-127095) - mountd: Minor refactor of get_rootfh() (RHEL-127095) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127095) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127095) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127095) Resolves: CVE-2025-12801 - gssd: protect kerberos ticket cache access (RHEL-103627) - nfsrahead: modify get_device_info logic (RHEL-108924) - update rdirplus documentation on nfs(5) man page (RHEL-91253) - mountstats fixes (RHEL-90242) - nfsiostat fixes (RHEL-90242) - gssd: unconditionally use krb5_get_init_creds_opt_alloc (RHEL-62422) - gssd: do not use krb5_cc_initialize (RHEL-62422) - gssd.man: add documentation for use-gss-proxy (RHEL-13085) Gating tests: add gating.yaml (bz 1681966) - nfs4_getfacl: Add new option -c/--omit-header (bz 1698281) - nfs4_setfacl: Skip comment field while reading ACE(s) (bz 1687299) - Gating tests: run tests from tests namespace (bz 1681966) - Updated to the latest upstream release: 0.3.5 (bz 1630606) - Remove gui which was still a proof of concept - Resolves: bug#1542228 - Updated to the latest upstream release: 0.3.4 (bz 1602029) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-2596] - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL] - rule: check address family in set collapse (Phil Sutter) [RHEL-5160] - Add expected error records for testsuite runs (Phil Sutter) [2211076] - tests: monitor: Summarize failures per test case (Phil Sutter) [2211076] - Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076] - Rebase onto version 1.0.4 (Phil Sutter) [2211076] - libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287] - src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287] - src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287] - rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287] - rule: memleak in __do_add_setelems() (Phil Sutter) [2073287] - tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924] - mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924] - mnl: do not build nftnl_set element list (Phil Sutter) [2047821] - tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773] - evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773] - evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594] - src: support for restoring element counters (Phil Sutter) [2039594] - netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594] - tests: shell: better parameters for the interval stack overflow test (Phil Sutter) [1908127] - tests: shell: $NFT needs to be invoked unquoted (Phil Sutter) [1908127] - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set") (Phil Sutter) [1908127] - segtree: Fix segfault when restoring a huge interval set (Phil Sutter) [1908127] - json: Drop pointless assignment in exthdr_expr_json() (Phil Sutter) [1999059] - parser_json: Fix for memleak in tcp option error path (Phil Sutter) [1999059] - parser_bison: Fix for implicit declaration of isalnum (Phil Sutter) [1999059] - parser_json: Fix error reporting for invalid syntax (Phil Sutter) [1994141] - tests: shell: Fix bogus testsuite failure with 100Hz (Phil Sutter) [1919203] - doc: nft.8: Extend monitor description by trace (Phil Sutter) [1820365] - include: missing sctp_chunk.h in Makefile.am (Phil Sutter) [1979334] - exthdr: Implement SCTP Chunk matching (Phil Sutter) [1979334] - scanner: sctp: Move to own scope (Phil Sutter) [1979334] - scanner: introduce start condition stack (Phil Sutter) [1979334] - json: Simplify non-tcpopt exthdr printing a bit (Phil Sutter) [1979334] - json: tcp: add raw tcp option match support (Phil Sutter) [1979334] - tcp: add raw tcp option match support (Phil Sutter) [1979334] - tcpopt: allow to check for presence of any tcp option (Phil Sutter) [1979334] - tcpopt: split tcpopt_hdr_fields into per-option enum (Phil Sutter) [1979334] - tcpopt: rename noop to nop (Phil Sutter) [1979334] - tcpopts: clean up parser -> tcpopt.c plumbing (Phil Sutter) [1979334] - parser: merge sack-perm/sack-permitted and maxseg/mss (Phil Sutter) [1979334] - tests/py: Move tcpopt.t to any/ directory (Phil Sutter) [1979334] - xt: Fix translation error path (Phil Sutter) [RHEL-5806] - evaluate: un-break rule insert with intervals (Phil Sutter) [RHEL-62895] - xt: Fix fallback printing for extensions matching keywords (Phil Sutter) [RHEL-5806] - xt: Fall back to generic printing from translation (Phil Sutter) [RHEL-5806] - xt: Rewrite unsupported compat expression dumping (Phil Sutter) [RHEL-5806] - xt: Purify enum nft_xt_type (Phil Sutter) [RHEL-5806] - xt: Delay libxtables access until translation (Phil Sutter) [RHEL-5806] - Warn for tables with compat expressions in rules (Phil Sutter) [RHEL-5806] - parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-2596] - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL] - rule: check address family in set collapse (Phil Sutter) [RHEL-5160] - Add expected error records for testsuite runs (Phil Sutter) [2211076] - tests: monitor: Summarize failures per test case (Phil Sutter) [2211076] - Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076] - Rebase onto version 1.0.4 (Phil Sutter) [2211076] - libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287] - src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287] - src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287] - rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287] - rule: memleak in __do_add_setelems() (Phil Sutter) [2073287] - tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924] - mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924] - mnl: do not build nftnl_set element list (Phil Sutter) [2047821] - tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773] - evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773] - evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594] - src: support for restoring element counters (Phil Sutter) [2039594] - netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594] - tests: shell: better parameters for the interval stack overflow test (Phil Sutter) [1908127] - tests: shell: $NFT needs to be invoked unquoted (Phil Sutter) [1908127] - Tree-wide use of python3 (Phil Sutter) [RHEL-179874] - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-179874] - src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-179599] - expression: cleanup expr_ops_by_type() and handle u32 input (Phil Sutter) [RHEL-179599] - netlink: handle invalid etype in set_make_key() (Phil Sutter) [RHEL-179599] - xt: Fix translation error path (Phil Sutter) [RHEL-5806] - evaluate: un-break rule insert with intervals (Phil Sutter) [RHEL-62895] - xt: Fix fallback printing for extensions matching keywords (Phil Sutter) [RHEL-5806] - xt: Fall back to generic printing from translation (Phil Sutter) [RHEL-5806] - xt: Rewrite unsupported compat expression dumping (Phil Sutter) [RHEL-5806] - xt: Purify enum nft_xt_type (Phil Sutter) [RHEL-5806] - xt: Delay libxtables access until translation (Phil Sutter) [RHEL-5806] - Warn for tables with compat expressions in rules (Phil Sutter) [RHEL-5806] - parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-2596] - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL] - rule: check address family in set collapse (Phil Sutter) [RHEL-5160] - Add expected error records for testsuite runs (Phil Sutter) [2211076] - tests: monitor: Summarize failures per test case (Phil Sutter) [2211076] - Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076] - Rebase onto version 1.0.4 (Phil Sutter) [2211076] - libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287] - src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287] - src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287] - rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287] - rule: memleak in __do_add_setelems() (Phil Sutter) [2073287] - tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924] - mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924] - mnl: do not build nftnl_set element list (Phil Sutter) [2047821] - tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773] - evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773] - evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594] - src: support for restoring element counters (Phil Sutter) [2039594] - netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594] - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 1.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 1.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Update to 1.2 - Update to 1.1 - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - ldconfig should skip temporary files created by RPM (RHEL-13720) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - s390x: Fix segfault in wcsncmp - Enhanced test coverage for strncmp, wcsncmp (RHEL-49490) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - Fix missed wakeup in POSIX thread condition variables (RHEL-8381) - add GB18030-2022 charmap and tests (RHEL-67806) - Remove some unused ppc64le string functions (RHEL-61259) - Use /sbin/ldconfig path for lorax compatibility (RHEL-63048) - aarch64: MTE compatible strncmp (RHEL-61255) - Use UsrMove path destination in the RPM files (RHEL-63048) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - Improve compatibility between underlinking and IFUNC resolvers (RHEL-16825) - Restore <sys/cdefs.h> compatibility with C90 compilers (RHEL-15867) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - CVE-2025-0395: Fix a buffer overflow in assert (RHEL-83306) - Correct locking and cancellation cleanup in syslog functions (RHEL-78390) - Restore internal ABI to avoid tooling false positives (RHEL-8381) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - x86: Check the lower byte of EAX of CPUID leaf 2 (RHEL-76211) - nscd: Fix an unlikely TTL issue in the netgroup cache (RHEL-35280) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - elf: Keep using minimal malloc after early DTV resize (RHEL-71921) - Add missing libnss_testX.so requirement for tst-nss-test3 (RHEL-88813) - libio: Fix a deadlock after fork in popen - libio: Correctly link tst-popen-fork against libpthread (RHEL-86018) - x86: Avoid integer truncation with large cache sizes (RHEL-76387) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Keep reloading /etc/resolv.conf after timeouts with getaddrinfo and AF_UNSPEC. - Avoid timeouts with getaddrinfo, AF_UNSPEC, and certain DNS error responses. (RHEL-18039) - Reduce spurious rebuilds while running tests (RHEL-93937) - CVE-2025-4802: static setuid dlopen may search LD_LIBRARY_PATH (RHEL-92685) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - Fix a segmentation fault in multi-threaded multi-namespace programs using ctype.h macros (RHEL-72011) - nss: Group merge does not react to ERANGE during merge (RHEL-114260) - CVE-2025-8058: Double free in regcomp (RHEL-105326) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - CVE-2026-0915: Stack memory disclosure in getnetbyaddr (RHEL-141849) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - Remove default /var/tmp for LD_PROFILE_OUTPUT (RHEL-142194) - rpminspect.yaml: note that glibc-minimal-langpack is empty (RHEL-123889) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Include CentOS Hyperscaler SIG patches backported by Intel (RHEL-15696) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - Change the currency symbol for the bg_BG locale to euro. (RHEL-137185) - Improve qsort implementation (RHEL-24169) - CVE-2025-15281: wordexp WRDE_REUSE uninitialized memory read (RHEL-142787) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172700) - Add tests for CVE-2026-4437 and CVE-2026-4438 (RHEL-173358) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168095) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162891) - Update locales for Croatia to use EUR as currency symbol. (RHEL-140104) - CVE-2026-77117: Non-progress DoS in SHIFT_JISX0213 decoding (RHEL-248056) - CVE-2026-80489: Non-progress DoS in EUC_JISX0213 decoding (RHEL-249638) - CVE-2026-18374: Heap buffer overflow via attacker-controlled fopen mode string (RHEL-251521) - Fail the build if there are unexpected test failures (RHEL-252938) - CVE-2026-19542: Fix out-of-bounds array write in tdelete (RHEL-247955) - elf: Adjust elf/tst-audit28 test expectations to avoid POWER9 failure (RHEL-168751) - CVE-2026-6791: Stack overflow in wordexp tilde expansion (RHEL-238489) - CVE-2026-6368: wordexp WRDE_APPEND state rollback on error (RHEL-238480) - patch-git: Avoid Lua string/number arithmetic in release bump (RHEL-253644) - patch-git: Import from c10s and turn on (RHEL-173106) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-181724) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-181725) - elf: Clarify and invert second argument of _dl_allocate_tls_init - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147) - elf: Avoid some free (NULL) calls in _dl_update_slotinfo - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994) - Update i386 libm-test-ulps (RHEL-52428) - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264) - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267) - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271) - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273) - CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31804) - Cache information in x86_64 ld.so --list-diagnostics output (RHEL-21997) - getaddrinfo: Return correct error EAI_MEMORY when out-of-memory (RHEL-19445) - Updates for AMD cache size computation (RHEL-3010) - Re-enable output buffering for wide stdio streams (RHEL-19824) - Fix TLS corruption during dlopen()/dlclose() sequences (RHEL-17468) - Add systemd-logind snippet (RestrictAddressFamilies) Resolves: #1647911 - BuildRequire systemd - Add systemd-logind snippet (IPAddressAllow=any) - Resolves: #1574959 - Inital release - alternatives: --keep-foreign incorrectly handles non-existent files - alternatives: isLink should return 0 in case of lstat error - spec: Replace not working awk command with sed (#63) - spec: Revert changes introduced in Fedora (#61) - spec: Add Provides /sbin/chkconfig in order to stay backwards compatible (#60) - spec: /sbin/chkconfig -> /usr/sbin/chkconfig (#59) - alternatives: tweak manpage to match the real 'remove' behavior (#58) - alternatives: add --keep-foreign (#57) - Translations update from Weblate - ci: Onboard chkconfig to Packit - zanata: remove zanata related stuff - Use make macros - alternatives: use one function for path cleaning - CI: specify more closely when to run CI - Add basic CI and README - spec: sync specfile with Fedora - spec: sync specfile with Fedora - makefile: Use rpmdev-bumpspec's legacy date option - Add feature to generate specfile entry, commit and archive - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Fix spelling of SELinux - Remove hardcoded systemd path - Package onboarded to gating - fix typo in memhog.8 - Remove contained patches - libnuma: make numa_police_memory() free of race - Update manpage description of --localalloc option - memhog : add man page - add gating test cases - Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[] - Rebase to 2.0.12 - Fix compilation error (bz1611734) - Use LDFLAGS from redhat-rpm-config - Escape macros in %changelog - fix typo in memhog.8 - Remove contained patches - libnuma: make numa_police_memory() free of race - Update manpage description of --localalloc option - memhog : add man page - add gating test cases - Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[] - Rebase to 2.0.12 - Fix compilation error (bz1611734) - Use LDFLAGS from redhat-rpm-config - Escape macros in %changelog - fix typo in memhog.8 - Remove contained patches - libnuma: make numa_police_memory() free of race - Update manpage description of --localalloc option - memhog : add man page - add gating test cases - Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[] - Rebase to 2.0.12 - Fix compilation error (bz1611734) - Use LDFLAGS from redhat-rpm-config - Escape macros in %changelog - recognize the -m option (RHEL-16506) - Remove initscripts from Requires (#1610280) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Enable on s390x - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Update to 20150602 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Fix VM crash RHEL-88173 - Fix BZ #2187288 - Fix BZ #1954185 - Do not re-enable the nvmefc-boot-connections service if we are just upgrading the package. - Fix a file permission - Fix a compiler warning - Merge fixes for PowerPC - Merge a few bugfixes - Update to version 1.16 - Merge various bugfixes - Fix BZ #2187288 - Fix BZ #1954185 - Do not re-enable the nvmefc-boot-connections service if we are just upgrading the package. - Fix a file permission - Fix a compiler warning - Merge fixes for PowerPC - Merge a few bugfixes - Update to version 1.16 - Merge various bugfixes - Update to version v1.14 - Fix gating tests. - Fix BZ 2173777 - Fix a failure when executing a clear command - Fix typo in the documentation - Update to the latest version - Support python3 dictionary access. - Update for new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update for new upstream release - Remove fix-setup.patch - Update for new upstream release - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - pkcsstats: Fix handling of user name - p11sak: Fix user confirmation prompt behavior when stdin is closed Related: #2159697 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - Resolves: RHEL-171558, Fix possible out-of-bounds access in BER decode functions - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - pkcsstats: Fix handling of user name - p11sak: Fix user confirmation prompt behavior when stdin is closed Related: #2159697 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - Resolves: RHEL-171558, Fix possible out-of-bounds access in BER decode functions - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - pkcsstats: Fix handling of user name - p11sak: Fix user confirmation prompt behavior when stdin is closed Related: #2159697 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - Resolves: RHEL-171558, Fix possible out-of-bounds access in BER decode functions - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - pkcsstats: Fix handling of user name - p11sak: Fix user confirmation prompt behavior when stdin is closed Related: #2159697 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - Resolves: RHEL-171558, Fix possible out-of-bounds access in BER decode functions - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - pkcsstats: Fix handling of user name - p11sak: Fix user confirmation prompt behavior when stdin is closed Related: #2159697 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - Resolves: RHEL-171558, Fix possible out-of-bounds access in BER decode functions - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - pkcsstats: Fix handling of user name - p11sak: Fix user confirmation prompt behavior when stdin is closed Related: #2159697 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - Resolves: RHEL-171558, Fix possible out-of-bounds access in BER decode functions - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - pkcsstats: Fix handling of user name - p11sak: Fix user confirmation prompt behavior when stdin is closed Related: #2159697 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - Resolves: RHEL-171558, Fix possible out-of-bounds access in BER decode functions - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - pkcsstats: Fix handling of user name - p11sak: Fix user confirmation prompt behavior when stdin is closed Related: #2159697 - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - add verify attributes for opencryptoki.conf to ignore the verification Related: #2159697 - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - add requirement on selinux-policy >= 3.14.3-121 for pkcsslotd policy sandboxing Related: #2159697 - Resolves: RHEL-171558, Fix possible out-of-bounds access in BER decode functions - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following - Resolves: RHEL-105918, fix for supporting CCA 8.4 - Fix implicit rejection with RSA keys with empty CKA_PRIVATE_EXPONENT Related: RHEL-22791 - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin) Resolves: RHEL-22791 - Resolves: RHEL-11413, update to 3.22.0 - Resolves: #2223588, FTBFS - Related: #2222595, add triggerun to reload daemon - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0 - Resolves: #2222594, p11sak fails as soon as there reside non-key objects - add workaround for segfault in PEM_write_bio() on OpenSSL 1.1.1 Related: #2159741 - Resolves: #2021827, rebuild with json-c-0.13.1-3 - Resolves: #1637998, docdir should not be versioned - Resolves: #1630614 - annocheck distro flag failures - Rebuild for Net-SNMP - Resolves: rhbz#1612887, install README-dynamic_simulator - fixed bz#1612887, manpage scan issues - Rebuild for new net-snmp - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - fix file list in docdir - updated to 3.8.0 - Resolves: #2021827, rebuild with json-c-0.13.1-3 - Resolves: #1637998, docdir should not be versioned - Resolves: #1630614 - annocheck distro flag failures - Rebuild for Net-SNMP - Resolves: rhbz#1612887, install README-dynamic_simulator - fixed bz#1612887, manpage scan issues - Rebuild for new net-snmp - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - fix file list in docdir - updated to 3.8.0 - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Reference default system-wide CA certificates in manpages (#1611624) - Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Reference default system-wide CA certificates in manpages (#1611624) - Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497) - Bump version to 2.4.46-20 - Resolves: RHEL-35538 - Fix OpenSSL channel binding digest - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Reference default system-wide CA certificates in manpages (#1611624) - Bump version to 2.4.46-21 - Resolves: RHEL-75823 - Fix double file close when first TLS connection fails - Bump version to 2.4.46-20 - Resolves: RHEL-35538 - Fix OpenSSL channel binding digest - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Reference default system-wide CA certificates in manpages (#1611624) - Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Reference default system-wide CA certificates in manpages (#1611624) - Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497) - Bump version to 2.4.46-20 - Resolves: RHEL-35538 - Fix OpenSSL channel binding digest - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Reference default system-wide CA certificates in manpages (#1611624) - Bump version to 2.4.46-21 - Resolves: RHEL-75823 - Fix double file close when first TLS connection fails - Bump version to 2.4.46-20 - Resolves: RHEL-35538 - Fix OpenSSL channel binding digest - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Reference default system-wide CA certificates in manpages (#1611624) - Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Reference default system-wide CA certificates in manpages (#1611624) - Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1623497) - Bump version to 2.4.46-20 - Resolves: RHEL-35538 - Fix OpenSSL channel binding digest - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Reference default system-wide CA certificates in manpages (#1611624) - Bump version to 2.4.46-21 - Resolves: RHEL-75823 - Fix double file close when first TLS connection fails - Bump version to 2.4.46-20 - Resolves: RHEL-35538 - Fix OpenSSL channel binding digest - Bump version to 2.4.46-19 - Resolves: RHEL-34283 - openldap: null pointer dereference in ber_memalloc_x function - Add TLS_REQSAN option and change the default to TRY (#1814674) - Rebuild without MP_2 support (#1909037) - CLDAP ldap_result hangs if nobody listens on the port (#1875361) - Fix covscan issues from previous release (#1822737) - Backport Channel Binding support (#1822904, #1822737) - Use OpenSSL-1.0.2+ API for host name verification (#1788572) - Do not fallback to checking CN when no SAN matched (#1740070) - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding - Fix file caching with different offsets (RHEL-4077) - Fix CVE-2023-40660: Potential PIN bypass - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init - Fix CVE-2023-5992: Marvin: Side-channel leaks while stripping encryption PKCS#1.5 padding - Fix introduced issues tagged by coverity (RHEL-765) - Avoid potential crash because of missing list terminator (#2196234) - Fix CVE-2023-2977: potential buffer overrun in pkcs15 cardos_have_verifyrc_package (#2211093) - Backport upstream changes regarding to reader removal (#2097048) - Use file cache by default (#1892810) - Avoid calloc with 0 argument (#1895401) - Support PIN change for HID Alt tokens (#1830901) - Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572 - Fix right padding of token labels of some cards (#1877973) - Unbreak different CardOS 5 configurations supporting raw RSA (#1830856) - Rebase to current upstream release (#1810660) - Unbreak RSA-PSS mechanisms in -6 release (#1775673) - Add support for Gemalto IDPrime smart cards (#1657970) - Fix 2k RSA key operations with Coolkey (#1766712) - Rebase to latest upstream release 3.3.24 - Resolves: bz1961961 - opensm service should after rdma-hw.target - Resolves: bz1906252 - Allow MCMR requests with default subnet prefix - Resolves: bz1898872 - Update opensm service file - Resolves: bz1892502 - Rebase to latest upstream release 3.3.23 - Resolves: bz1815960 - Onboard gating configuration - Resolves: bz1682401 - Rebase to latest upstream release 3.3.22 - Resolves: bz1708475 - Restore the 'subnet_prefix' option - Resolves: bz1664575 - Rebase to latest upstream release 3.3.21 - Resolves: bz1602645 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebase to latest upstream release 3.3.24 - Resolves: bz1961961 - opensm service should after rdma-hw.target - Resolves: bz1906252 - Allow MCMR requests with default subnet prefix - Resolves: bz1898872 - Update opensm service file - Resolves: bz1892502 - Rebase to latest upstream release 3.3.23 - Resolves: bz1815960 - Onboard gating configuration - Resolves: bz1682401 - Rebase to latest upstream release 3.3.22 - Resolves: bz1708475 - Restore the 'subnet_prefix' option - Resolves: bz1664575 - Rebase to latest upstream release 3.3.21 - Resolves: bz1602645 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix new issues found by static analyzers - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-272837 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-272826 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-272820 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix new issues found by static analyzers - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-272837 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-272826 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-272820 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix new issues found by static analyzers - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-272837 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-272826 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-272820 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix new issues found by static analyzers - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-272837 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-272826 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-272820 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix new issues found by static analyzers - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-272837 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-272826 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-272820 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix new issues found by static analyzers - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-272837 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-272826 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-272820 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2092462 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090372 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098279 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067146 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. - Resolves: rhbz#1978214 - Related: rhbz#1934534 - Cleansup the peer point formats on renegotiation - Resolves rhbz#1965362 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2092462 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090372 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098279 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067146 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067145 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. - Resolves: rhbz#1978214 - Related: rhbz#1934534 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067145 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-180978 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-180983 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165759 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-179623 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-39119 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142010 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246293 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264416 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165759 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-179623 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-39119 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142010 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2092462 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090372 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098279 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067146 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. - Resolves: rhbz#1978214 - Related: rhbz#1934534 - Cleansup the peer point formats on renegotiation - Resolves rhbz#1965362 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2092462 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090372 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098279 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067146 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067145 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. - Resolves: rhbz#1978214 - Related: rhbz#1934534 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067145 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-180978 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-180983 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165759 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-179623 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-39119 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142010 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246293 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264416 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165759 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-179623 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-39119 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142010 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - updated to 2.4.1 (RHEL-11410) - Resolves: RHEL-11410 - engine: Only register those algos specified with default_algorithms (#2221891) - Resolves: #2221891 - updated to 2.4.0 (#2159722) - Resolves: #2159722 - updated to 2.3.1 (#2110379) - Resolves: #2110379 - updated to 2.3.0 (#2043842) - Resolves: #2043842 - updated to 2.2.1 (#1984971) - Resolves: #1984971 - fix DSA and DH registration (#1989064) - Resolves: #1989064 - updated to 2.2.0 (#1919222) - do not use libica software fallbacks (#1922204) - Resolves: #1919222 #1922204 - updated to 2.1.1 (#1780306) - Resolves: #1780306 - updated to 2.1.0 (#1726242) - Resolves: #1726242, #1723854 - updated to 1.0.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - apply fix for autotools - don't hard-code %enginesdir - initial Fedora version - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2092462 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090372 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098279 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067146 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. - Resolves: rhbz#1978214 - Related: rhbz#1934534 - Cleansup the peer point formats on renegotiation - Resolves rhbz#1965362 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2092462 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090372 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098279 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067146 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067145 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. - Resolves: rhbz#1978214 - Related: rhbz#1934534 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067145 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-180978 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-180983 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165759 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-179623 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-39119 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142010 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246293 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264416 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165759 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-179623 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-39119 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142010 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2092462 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090372 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098279 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067146 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. - Resolves: rhbz#1978214 - Related: rhbz#1934534 - Cleansup the peer point formats on renegotiation - Resolves rhbz#1965362 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2092462 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090372 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098279 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067146 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067145 - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings - Resolves: rhbz#2005402 - Fixes bugs in s390x AES code. - Uses the first detected address family if IPv6 is not available - Reverts the changes in https://github.com/openssl/openssl/pull/13305 as it introduces a regression if server has a DSA key pair, the handshake fails when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted, it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already known - https://trac.nginx.org/nginx/ticket/2071#comment:1 As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx could early callback instead of servername callback. - Resolves: rhbz#1978214 - Related: rhbz#1934534 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates - Resolves: rhbz#2067145 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-180978 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-180983 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17694 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16536 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14243 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14237 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 - Update expired certificates used in the testsuite Resolves: rhbz#2100554 - Fix CVE-2022-1292: openssl: c_rehash script allows command injection Resolves: rhbz#2090371 - Fix CVE-2022-2068: the c_rehash script allows command injection Resolves: rhbz#2098278 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165759 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-179623 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-39119 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142010 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix no-ec build Resolves: rhbz#2071020 - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246293 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264416 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165759 - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-179623 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-39119 - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142010 - Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128613 - Fix bug for ticket_lifetime_hint exceed issue Resolves: RHEL-119891 - Backport fix SSL_select_next proto from OpenSSL 3.2 Fix CVE-2024-5535 Resolves: RHEL-45654 - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fix memory leak in PKCS11_pkey_meths (#2097690) - Fix memory leak in RSA method (#2097690) - Set RSA_FLAG_FIPS_METHOD for RSA methods (#1777892) - Update to 0.4.10 (#1745082) - Add BuildRequires for OpenSSL >= 1.0.2, required for testing - Print tests logs if failed during build - Small bug fixes such as removal of unused variable - Search objects in all matching tokens (#1705505) - Require OpenSSL >= 1.0.2 - Fixed missing declaration of ERR_get_CKR_code() - Add support to use EC keys and tests (#1625338) - Exposed check_fork() API - Fixed memory leak of RSA objects in pkcs11_store_key() - Updated OpenSSL license in eng_front.c - Fixed build for old C dialects - Allow engine to use private key without PIN - Require DEBUG to be defined to print debug messages - Changed package description - Update to 0.4.8-1 - RSA key generation on the token - RSA-OAEP and RSA-PKCS encryption support - RSA-PSS signature support - Support for OpenSSL 1.1.1 beta - Removed support for OpenSSL 0.9.8 - Various bug fixes and enhancements - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Reintroduce libp11-devel subpackage to Fedora (#1583719) - Obsolete libp11-devel to fix update - Fixed broken Obsoletes - Package renamed from libp11 to openssl-pkcs11 - Bump release number - Resolves: #RHEL-55234 - 90fallback: include possible kernel parameters from grub's default file - common.sh: do not resolve symbolic link on mapped device filesystems - Resolves: #RHEL-55234 - Another build but with a gating.yaml to allow leaving gating Resolves: rhbz#1624158 - Bump NVR to allow building Resolves: rhbz#1624158 - Make gcc use -Wl,-z,now -Wl,-z,relro -pie. Dunno why the default didn't pick this up. Resolves: rhbz#1624158 - Add gcc build dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Fix a path problem in btrfsfix.patch, fixes #1529616 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Add IBM specific mechanisms and attributes Resolves: RHEL-10571 - Rebase to 0.23.22 to fix memory safety issues (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363) - Preserve DT_NEEDED information from the previous version, flagged by rpmdiff - Add xsltproc to BR - Fix realloc usage on proxy cleanup (#1894979) - Make 'trust anchor --store' preserve all attributes from .p11-kit files - Restore clobbered changelog entry - Update p11-kit-invalid-config.patch to be more thorough (thanks to Alexander Sosedkin) - Update to upstream 0.23.21 release - Fix crash on unloading the library, when it is both linked and dlopen'ed - Prefer fixed closures to libffi closures - Update p11-kit-coverity.patch - Fix issues spotted by coverity - Add IBM specific mechanisms and attributes Resolves: RHEL-10571 - Rebase to 0.23.22 to fix memory safety issues (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363) - Preserve DT_NEEDED information from the previous version, flagged by rpmdiff - Add xsltproc to BR - Fix realloc usage on proxy cleanup (#1894979) - Make 'trust anchor --store' preserve all attributes from .p11-kit files - Restore clobbered changelog entry - Update p11-kit-invalid-config.patch to be more thorough (thanks to Alexander Sosedkin) - Update to upstream 0.23.21 release - Fix crash on unloading the library, when it is both linked and dlopen'ed - Prefer fixed closures to libffi closures - Update p11-kit-coverity.patch - Fix issues spotted by coverity - Add IBM specific mechanisms and attributes Resolves: RHEL-10571 - Rebase to 0.23.22 to fix memory safety issues (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363) - Preserve DT_NEEDED information from the previous version, flagged by rpmdiff - Add xsltproc to BR - Fix realloc usage on proxy cleanup (#1894979) - Make 'trust anchor --store' preserve all attributes from .p11-kit files - Restore clobbered changelog entry - Update p11-kit-invalid-config.patch to be more thorough (thanks to Alexander Sosedkin) - Update to upstream 0.23.21 release - Fix crash on unloading the library, when it is both linked and dlopen'ed - Prefer fixed closures to libffi closures - Update p11-kit-coverity.patch - Fix issues spotted by coverity - Add IBM specific mechanisms and attributes Resolves: RHEL-10571 - Rebase to 0.23.22 to fix memory safety issues (CVE-2020-29361, CVE-2020-29362, and CVE-2020-29363) - Preserve DT_NEEDED information from the previous version, flagged by rpmdiff - Add xsltproc to BR - Fix realloc usage on proxy cleanup (#1894979) - Make 'trust anchor --store' preserve all attributes from .p11-kit files - Restore clobbered changelog entry - Update p11-kit-invalid-config.patch to be more thorough (thanks to Alexander Sosedkin) - Update to upstream 0.23.21 release - Fix crash on unloading the library, when it is both linked and dlopen'ed - Prefer fixed closures to libffi closures - Update p11-kit-coverity.patch - Fix issues spotted by coverity - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 - pam_motd: avoid unnecessary logging. Resolves: #2091062 - pam_lastlog: check localtime_r() return value. Resolves: #2012871 - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2062512 - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2082442 - pam_pwhistory: load configuration from file. Resolves: #2068461 - Regenerate the /run/motd.d at each boot. Resolves: #2104878 - pam_usertype: only use SYS_UID_MAX for system users. Resolves: #1949137 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 - pam_motd: avoid unnecessary logging. Resolves: #2091062 - pam_lastlog: check localtime_r() return value. Resolves: #2012871 - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2062512 - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2082442 - pam_pwhistory: load configuration from file. Resolves: #2068461 - Regenerate the /run/motd.d at each boot. Resolves: #2104878 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62877 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23018 - libpam: support long lines in service files. Resolves: RHEL-5051 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 - pam_motd: avoid unnecessary logging. Resolves: #2091062 - pam_lastlog: check localtime_r() return value. Resolves: #2012871 - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2062512 - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2082442 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62877 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23018 - libpam: support long lines in service files. Resolves: RHEL-5051 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62877 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23018 - libpam: support long lines in service files. Resolves: RHEL-5051 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70476 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62877 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23018 - libpam: support long lines in service files. Resolves: RHEL-5051 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - pam_userdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191699 - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70476 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62877 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23018 - libpam: support long lines in service files. Resolves: RHEL-5051 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 - pam_motd: avoid unnecessary logging. Resolves: #2091062 - pam_lastlog: check localtime_r() return value. Resolves: #2012871 - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2062512 - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2082442 - pam_pwhistory: load configuration from file. Resolves: #2068461 - Regenerate the /run/motd.d at each boot. Resolves: #2104878 - pam_usertype: only use SYS_UID_MAX for system users. Resolves: #1949137 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 - pam_motd: avoid unnecessary logging. Resolves: #2091062 - pam_lastlog: check localtime_r() return value. Resolves: #2012871 - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2062512 - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2082442 - pam_pwhistory: load configuration from file. Resolves: #2068461 - Regenerate the /run/motd.d at each boot. Resolves: #2104878 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62877 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23018 - libpam: support long lines in service files. Resolves: RHEL-5051 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 - pam_motd: avoid unnecessary logging. Resolves: #2091062 - pam_lastlog: check localtime_r() return value. Resolves: #2012871 - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2062512 - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2082442 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62877 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23018 - libpam: support long lines in service files. Resolves: RHEL-5051 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62877 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23018 - libpam: support long lines in service files. Resolves: RHEL-5051 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - smartcard-auth: modify the content to remove unnecessary modules. Resolves: #1983683 - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70476 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62877 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23018 - libpam: support long lines in service files. Resolves: RHEL-5051 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - pam_misc: make length of misc_conv() configurable and set to 4096. Resolves: #2209785 - pam_userdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191699 - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70476 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96724 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66242 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62877 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23018 - libpam: support long lines in service files. Resolves: RHEL-5051 - fix formatting of audit messages. Resolves: RHEL-28620 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21242 - pam_access: handle hostnames in access.conf. Resolves: RHEL-3374 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-19810 - pam_unix: enable bcrypt. Resolves: RHEL-5057 - Update to cifs-utils-7.0 - Resolves: rhbz#2163373 - Add manual gating tests - docs: cleanup rst formating - mount.cifs.rst: document new (no)handlecache mount option - manpage: update mount.cifs manpage with info about rdma option - checkopts: add python script to cross check mount options - mount.cifs.rst: document missing options, correct wrong ones - checkopts: report duplicated options in man page - mount.cifs.rst: more cleanups - mount.cifs.rst: document vers=3 mount option - mount.cifs.rst: document vers=3.02 mount option - cifs: Allow DNS resolver key to expire - mount.cifs: be more verbose and helpful regarding mount errors - Update mount.cifs with vers=default mount option and SMBv3.0.2 - mount.cifs.rst: update vers=3.1.1 option description - getcifsacl: Do not go to parse_sec_desc if getxattr fails. - getcifsacl: Improve help usage and add -h option. - setcifsacl: fix adding ACE when owner sid in unexpected location - cifs.upcall: fix a compiler warning - mount.cifs Add various missing parms from the help text - mount.cifs: add more options to help message - mount.cifs: detect GMT format of snapshot version - Update man page for mount.cifs to add new options - mount.cifs.rst: mention kernel version for snapshots - Fix authors and maintainers - Use Python 3 version of rst2man utility for generating man pages - update to 6.8 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - more updates, switch to rst for manpages - update mount.cifs manpage to describe defaults better (BZ#1474539) - pull in all patches merged since 6.7 was released - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - update to 6.7 release - resolves: RHEL-192933 - fix krb5 mount regression - cifs.upcall: remove getpwuid dependency - cifs.upcall: fix compiler warning with -Wvla - Resolves: RHEL-185759 - Fix CVE-2026-12505 - docs: update echo_interval description - Resolves: RHEL-80397 - mount.cifs.rst: add missing reference for sssd - mount.cifs.rst: update section about xattr/acl support - Resolves: RHEL-41059 - Update to cifs-utils-7.0 - Resolves: rhbz#2163373 - Add manual gating tests - docs: cleanup rst formating - mount.cifs.rst: document new (no)handlecache mount option - manpage: update mount.cifs manpage with info about rdma option - checkopts: add python script to cross check mount options - mount.cifs.rst: document missing options, correct wrong ones - checkopts: report duplicated options in man page - mount.cifs.rst: more cleanups - mount.cifs.rst: document vers=3 mount option - mount.cifs.rst: document vers=3.02 mount option - cifs: Allow DNS resolver key to expire - mount.cifs: be more verbose and helpful regarding mount errors - Update mount.cifs with vers=default mount option and SMBv3.0.2 - mount.cifs.rst: update vers=3.1.1 option description - getcifsacl: Do not go to parse_sec_desc if getxattr fails. - getcifsacl: Improve help usage and add -h option. - setcifsacl: fix adding ACE when owner sid in unexpected location - cifs.upcall: fix a compiler warning - mount.cifs Add various missing parms from the help text - mount.cifs: add more options to help message - mount.cifs: detect GMT format of snapshot version - Update man page for mount.cifs to add new options - mount.cifs.rst: mention kernel version for snapshots - Fix authors and maintainers - Use Python 3 version of rst2man utility for generating man pages - update to 6.8 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - more updates, switch to rst for manpages - update mount.cifs manpage to describe defaults better (BZ#1474539) - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix new issues found by static analyzers - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - Omit client side from minimize-sha1-use.patch to prevent regression (#2093897) - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - Fix parsing of IPv6 IPs in sftp client (#2151334) - Avoid ssh banner one-byte overflow (#2138344) - Avoid crash of sshd when Include folder does not exist (#2133087) - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - rebuilt Related: CVE-2023-38408 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Limit artificial delays in sshd while login using AD user Resolves: RHEL-1684 - Add comment to OpenSSH server config about FIPS-incompatible key Resolves: RHEL-5221 - Avoid killing all processes on system in case of race condition Resolves: RHEL-11548 - Avoid sshd_config 256K limit Resolves: RHEL-5279 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - Fix GSS KEX causing ssh failures when connecting to WinSSHD Resolves: RHEL-5321 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - Fix Terrapin attack Resolves: RHEL-19308 - Fix Terrapin attack Resolves: RHEL-19308 - Forbid shell metasymbols in username/hostname Resolves: RHEL-19788 - Using DigestSign/DigestVerify functions for better FIPS compatibility Resolves: RHEL-5217 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE-2026-60000: Fix DoS via excessive GSSAPI authentication attempts Resolves: RHEL-272837 - CVE-2026-60001: Fix cases in GSSAPI and keyboard-interactive authentication where the minimum per-attempt delay was not being enforced Resolves: RHEL-272826 - CVE-2026-73283: Complete the fix of security bypass due to incorrect handling of forwarding and tunneling options Resolves: RHEL-272820 - CVE-2026-73282: Fix information disclosure and data corruption via use-after-free in ssh client Resolves: RHEL-248257 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Related: RHEL-234763 - CVE-2026-59995: Fix sftp download to server-controlled path when performing download on the commandline Resolves: RHEL-236324 - CVE-2026-59999: Fix DisableForwarding=yes not overriding PermitTunnel=yes Resolves: RHEL-236280 - Improve fix for CVE-2023-38408, avoid invoking constructors on dlopen() Resolves: RHEL-234763 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-185775 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185855 - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164743 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166240 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166224 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166192 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166208 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155814 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 - Fix missing invalid error code checks in OpenSSH. It prevents a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465) Resolves: RHEL-109228 - Upstream: Ignore SIGPIPE earlier in main() Resolves: RHEL-37743 - tests: Add a test for resizepart on a busy partition (bcl) Related: rhbz#1861804 - parted: Preserve resizepart End when prompted for busy partition (bcl) Resolves: rhbz#1861804 - Fix end_input usage in do_resizepart (bcl) Related: rhbz#1861804 - tests: Test incomplete resizepart command (bcl) Related: rhbz#1861804 - Fix resizepart iec unit end sector (psusi) Related: rhbz#1861804 - libparted: Fix endian bug in bsd.c (AWilcox) Resolves: rhbz#1980105 - libparted: Re-enabled virtio-attached DASD heuristics on s390 Resolves: rhbz#1750663 - Add CI tests Resolves: rhbz#1653912 - t6000-dm: Stop using private lvm root Related: rhbz#1653912 - Fix strncpy fix, always add NULL terminator Resolves: rhbz#1615635 - Use python3-devel in buildroot Resolves: rhbz#1615576 - linux.c: Use sys/sysmacros.h for major/minor Resolves: rhbz#1615592 - Fix the length of several strncpy calls (bcl) Related: rhbz#1602652 - parted.c: Always free peek_word (bcl) Related: rhbz#1602652 - parted.c: Make sure dev_name is freed (bcl) Related: rhbz#1602652 - t6100-mdraid-partitions: Use v0.90 metadata for the test (bcl) - Fix msdos-overlap to work correctly with py2 or py3 (bcl) Related: rhbz#1595810 - Switch gpt-header-move and msdos-overlap to python3 (bcl) Resolves: rhbz#1595810 - Modify gpt-header-move and msdos-overlap to work with py2 or py3 (bcl) Related: rhbz#1595810 - Switch to using gpg2 for signature check Resolves: rhbz#1566029 - Add gcc BuildRequires for future minimal buildroot support - Remove %clean section - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuild due to migrated tests Related: #1841499 - fix inconsistencies in manpage - fix incorrect -S output Resolves: #1612906, #1740168 - Removed autotools dependencies - Update to passwd-0.80 Resolves: #1293929 - Mercurial changeset ID changed to the corresponding Git changeset ID - Added missing gcc dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Redirect URL: and Source: from fedorahosted.org to pagure.io Resolves: #1472576 - Related: #1733565, apply the patch correctly - CVE-2019-13636 , Don't follow symlinks unless --follow-symlinks is given - Resolves: #1665928, patch has a huge error output and segfaults when the file to be patched does not exist - CVE-2018-20969, invoke ed directly instead of using the shell - Added virtual provides for bundled gnulib library - Resolves: #1554752, CVE-2018-6952 Double free of memory - avoid warnings from GCC8 - fixed CVE-2018-1000156 - apply the patch for CVE-2018-6951 - 2.7.6 (CVE-2016-10713, CVE-2018-6951, CVE-2018-6952). - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - fix dependency of devel subpkg on libs (#2111644) - fix locations wrt UsrMove(#2111644) - pciutils updated to 3.7.0, add support for basic DVSEC and CXL DVSEC (#1856436) - add support for RCEC Associated Endpoint (#1856440) - rebuild package - pciutils updated to 3.6.4 - some of the VPD data fields were displayed as unknown (#1828741) - fix covscan found issues (#1607017) - Use LDFLAGS from redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - pciutils updated to 3.5.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - fix dependency of devel subpkg on libs (#2111644) - fix locations wrt UsrMove(#2111644) - pciutils updated to 3.7.0, add support for basic DVSEC and CXL DVSEC (#1856436) - add support for RCEC Associated Endpoint (#1856440) - rebuild package - pciutils updated to 3.6.4 - some of the VPD data fields were displayed as unknown (#1828741) - fix covscan found issues (#1607017) - Use LDFLAGS from redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - pciutils updated to 3.5.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - fix dependency of devel subpkg on libs (#2111644) - fix locations wrt UsrMove(#2111644) - pciutils updated to 3.7.0, add support for basic DVSEC and CXL DVSEC (#1856436) - add support for RCEC Associated Endpoint (#1856440) - rebuild package - pciutils updated to 3.6.4 - some of the VPD data fields were displayed as unknown (#1828741) - fix covscan found issues (#1607017) - Use LDFLAGS from redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - pciutils updated to 3.5.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuild for BZ#1954441 - Fix CVE-2019-20838 (a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier) (bug #1852252) - Fix CVE-2020-14155 (an integer overflow when parsing numbers after "(?C")) (bug #1851552) - Fix anchoring in conditionals with only one branch (bug #1619228) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256 (bug #1619228) - Fix handling UTF and start-of-pattern options in C++ wrapper (upstream bug #2283) - Fix an error message and locale handling in pcregrep tool - 8.42 bump - Fix compiler warnings in pcregrep - 8.42-RC1 bump - Fix returning unset groups in POSIX interface if REG_STARTEND has a non-zero starting offset (upstream bug #2244) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuild for BZ#1954441 - Fix CVE-2019-20838 (a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier) (bug #1852252) - Fix CVE-2020-14155 (an integer overflow when parsing numbers after "(?C")) (bug #1851552) - Fix anchoring in conditionals with only one branch (bug #1619228) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256 (bug #1619228) - Fix handling UTF and start-of-pattern options in C++ wrapper (upstream bug #2283) - Fix an error message and locale handling in pcregrep tool - 8.42 bump - Fix compiler warnings in pcregrep - 8.42-RC1 bump - Fix returning unset groups in POSIX interface if REG_STARTEND has a non-zero starting offset (upstream bug #2244) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuild for BZ#1954441 - Fix CVE-2019-20838 (a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier) (bug #1852252) - Fix CVE-2020-14155 (an integer overflow when parsing numbers after "(?C")) (bug #1851552) - Fix anchoring in conditionals with only one branch (bug #1619228) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256 (bug #1619228) - Fix handling UTF and start-of-pattern options in C++ wrapper (upstream bug #2283) - Fix an error message and locale handling in pcregrep tool - 8.42 bump - Fix compiler warnings in pcregrep - 8.42-RC1 bump - Fix returning unset groups in POSIX interface if REG_STARTEND has a non-zero starting offset (upstream bug #2244) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuild for BZ#1954441 - Fix CVE-2019-20838 (a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier) (bug #1852252) - Fix CVE-2020-14155 (an integer overflow when parsing numbers after "(?C")) (bug #1851552) - Fix anchoring in conditionals with only one branch (bug #1619228) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256 (bug #1619228) - Fix handling UTF and start-of-pattern options in C++ wrapper (upstream bug #2283) - Fix an error message and locale handling in pcregrep tool - 8.42 bump - Fix compiler warnings in pcregrep - 8.42-RC1 bump - Fix returning unset groups in POSIX interface if REG_STARTEND has a non-zero starting offset (upstream bug #2244) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuild for BZ#1954441 - Fix CVE-2019-20838 (a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier) (bug #1852252) - Fix CVE-2020-14155 (an integer overflow when parsing numbers after "(?C")) (bug #1851552) - Fix anchoring in conditionals with only one branch (bug #1619228) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256 (bug #1619228) - Fix handling UTF and start-of-pattern options in C++ wrapper (upstream bug #2283) - Fix an error message and locale handling in pcregrep tool - 8.42 bump - Fix compiler warnings in pcregrep - 8.42-RC1 bump - Fix returning unset groups in POSIX interface if REG_STARTEND has a non-zero starting offset (upstream bug #2244) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Resolves: CVE-2022-1586 - Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT) (bug #1734468) - 10.32 bump (bug #1628200) - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier (bug #1628200) - Fix matching a zero-repeated subroutine call at a start of a pattern (bug #1628200) - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200) - Fix caseless matching an extended class in JIT mode (bug #1617960) - Fix anchoring in conditionals with only one branch (bug #1617960) - Recognize all Unicode space characters with /x option in a pattern (bug #1617960) - Fix changing dynamic options (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 255, (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256, (bug #1617960) - Fix backtracking atomic groups when they are not separated by something with a backtracking point - Fix checking that a lookbehind assertion has a fixed length if the lookbehind assertion is used inside a lookahead assertion - Fix parsing VERSION conditions - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern matches an empty string, but never at the starting offset - Fix bug when \K is used in a lookbehind in a substitute pattern - Backport multiple CVEs fixes - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111 - Add explicit Requires on pcre2-utf16/utf32 for pcre2-tools subpackage - Resolves: CVE-2022-1586 - Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT) (bug #1734468) - 10.32 bump (bug #1628200) - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier (bug #1628200) - Fix matching a zero-repeated subroutine call at a start of a pattern (bug #1628200) - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200) - Fix caseless matching an extended class in JIT mode (bug #1617960) - Fix anchoring in conditionals with only one branch (bug #1617960) - Recognize all Unicode space characters with /x option in a pattern (bug #1617960) - Fix changing dynamic options (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 255, (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256, (bug #1617960) - Fix backtracking atomic groups when they are not separated by something with a backtracking point - Fix checking that a lookbehind assertion has a fixed length if the lookbehind assertion is used inside a lookahead assertion - Fix parsing VERSION conditions - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern matches an empty string, but never at the starting offset - Resolves: CVE-2022-1586 - Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT) (bug #1734468) - 10.32 bump (bug #1628200) - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier (bug #1628200) - Fix matching a zero-repeated subroutine call at a start of a pattern (bug #1628200) - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200) - Fix caseless matching an extended class in JIT mode (bug #1617960) - Fix anchoring in conditionals with only one branch (bug #1617960) - Recognize all Unicode space characters with /x option in a pattern (bug #1617960) - Fix changing dynamic options (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 255, (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256, (bug #1617960) - Fix backtracking atomic groups when they are not separated by something with a backtracking point - Fix checking that a lookbehind assertion has a fixed length if the lookbehind assertion is used inside a lookahead assertion - Fix parsing VERSION conditions - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern matches an empty string, but never at the starting offset - Fix bug when \K is used in a lookbehind in a substitute pattern - Backport multiple CVEs fixes - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111 - Add explicit Requires on pcre2-utf16/utf32 for pcre2-tools subpackage - Resolves: CVE-2022-1586 - Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT) (bug #1734468) - 10.32 bump (bug #1628200) - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier (bug #1628200) - Fix matching a zero-repeated subroutine call at a start of a pattern (bug #1628200) - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200) - Fix caseless matching an extended class in JIT mode (bug #1617960) - Fix anchoring in conditionals with only one branch (bug #1617960) - Recognize all Unicode space characters with /x option in a pattern (bug #1617960) - Fix changing dynamic options (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 255, (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256, (bug #1617960) - Fix backtracking atomic groups when they are not separated by something with a backtracking point - Fix checking that a lookbehind assertion has a fixed length if the lookbehind assertion is used inside a lookahead assertion - Fix parsing VERSION conditions - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern matches an empty string, but never at the starting offset - Resolves: CVE-2022-1586 - Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT) (bug #1734468) - 10.32 bump (bug #1628200) - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier (bug #1628200) - Fix matching a zero-repeated subroutine call at a start of a pattern (bug #1628200) - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200) - Fix caseless matching an extended class in JIT mode (bug #1617960) - Fix anchoring in conditionals with only one branch (bug #1617960) - Recognize all Unicode space characters with /x option in a pattern (bug #1617960) - Fix changing dynamic options (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 255, (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256, (bug #1617960) - Fix backtracking atomic groups when they are not separated by something with a backtracking point - Fix checking that a lookbehind assertion has a fixed length if the lookbehind assertion is used inside a lookahead assertion - Fix parsing VERSION conditions - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern matches an empty string, but never at the starting offset - Fix bug when \K is used in a lookbehind in a substitute pattern - Backport multiple CVEs fixes - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111 - Add explicit Requires on pcre2-utf16/utf32 for pcre2-tools subpackage - Resolves: CVE-2022-1586 - Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT) (bug #1734468) - 10.32 bump (bug #1628200) - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier (bug #1628200) - Fix matching a zero-repeated subroutine call at a start of a pattern (bug #1628200) - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200) - Fix caseless matching an extended class in JIT mode (bug #1617960) - Fix anchoring in conditionals with only one branch (bug #1617960) - Recognize all Unicode space characters with /x option in a pattern (bug #1617960) - Fix changing dynamic options (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 255, (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256, (bug #1617960) - Fix backtracking atomic groups when they are not separated by something with a backtracking point - Fix checking that a lookbehind assertion has a fixed length if the lookbehind assertion is used inside a lookahead assertion - Fix parsing VERSION conditions - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern matches an empty string, but never at the starting offset - Resolves: CVE-2022-1586 - Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT) (bug #1734468) - 10.32 bump (bug #1628200) - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier (bug #1628200) - Fix matching a zero-repeated subroutine call at a start of a pattern (bug #1628200) - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200) - Fix caseless matching an extended class in JIT mode (bug #1617960) - Fix anchoring in conditionals with only one branch (bug #1617960) - Recognize all Unicode space characters with /x option in a pattern (bug #1617960) - Fix changing dynamic options (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 255, (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256, (bug #1617960) - Fix backtracking atomic groups when they are not separated by something with a backtracking point - Fix checking that a lookbehind assertion has a fixed length if the lookbehind assertion is used inside a lookahead assertion - Fix parsing VERSION conditions - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern matches an empty string, but never at the starting offset - Fix bug when \K is used in a lookbehind in a substitute pattern - Backport multiple CVEs fixes - CVE-2026-89157, CVE-2026-89158, CVE-2026-86145, CVE-2026-103111 - Add explicit Requires on pcre2-utf16/utf32 for pcre2-tools subpackage - Resolves: CVE-2022-1586 - Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT) (bug #1734468) - 10.32 bump (bug #1628200) - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has a greater than 1 fixed quantifier (bug #1628200) - Fix matching a zero-repeated subroutine call at a start of a pattern (bug #1628200) - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200) - Fix caseless matching an extended class in JIT mode (bug #1617960) - Fix anchoring in conditionals with only one branch (bug #1617960) - Recognize all Unicode space characters with /x option in a pattern (bug #1617960) - Fix changing dynamic options (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 255, (bug #1617960) - Fix autopossessifying a repeated negative class with no characters less than 256 that is followed by a positive class with only characters less than 256, (bug #1617960) - Fix backtracking atomic groups when they are not separated by something with a backtracking point - Fix checking that a lookbehind assertion has a fixed length if the lookbehind assertion is used inside a lookahead assertion - Fix parsing VERSION conditions - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern matches an empty string, but never at the starting offset - Rebase to 1.9.5 version to address race conditions (#2014641) - Drop dowstream polkit policy to avoid repeated authentication requests in remote sessions (#1928154) - rebuild to retrigger gating - Update max readers to 48 - test gating. - Update max readers to 32 - Fix python shebangs (#1580842) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - rebuild to retrigger CI - Increase readers from 32 to 48. - update the reader list from new readers added to upstream ccid 1.4.32 - Test gating - fix broken dist variable in spec file. - Increase readers from 16 to 32. - New upstream release (#1547482) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release (#1504404) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebase to 1.9.5 version to address race conditions (#2014641) - Drop dowstream polkit policy to avoid repeated authentication requests in remote sessions (#1928154) - rebuild to retrigger gating - Update max readers to 48 - test gating. - Update max readers to 32 - Fix python shebangs (#1580842) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebase to 1.9.5 version to address race conditions (#2014641) - Drop dowstream polkit policy to avoid repeated authentication requests in remote sessions (#1928154) - rebuild to retrigger gating - Update max readers to 48 - test gating. - Update max readers to 32 - Fix python shebangs (#1580842) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Update to upstream release 23.07.0.0.27 - Resolves: RHEL-1270 - Add missing Intel Parameters - Resolves: rhbz#2211464 - Update to upstream release 23.04.0.0.23 - Add gating tests - Resolves: rhbz#2212517 - Rebase to upstream version 4.5-0.20 - Resolves: rhbz#2168109 - Rebase to upstream release perftest-4.5-0.12 - Resolves: rhbz#2020062 - Rebase to upstream release perftest-4.5-0.2 - Resolves: rhbz#1960074 - Check PCIe relaxed ordering compliant - Resolves: rhbz#1902855 - Rebase to upstream release perftest-4.4-0.32 - Resolves: bz1888570 - Fix segment fault with large QP numbers - Resolves: rhbz#1859358 - Update to upstream 4.4-0.29.g817ec38 tarball - Resolves: rhbz#1832709 - Perl 5.20 rebuild - Update to 1.1903 - Fix documentation typos (CPAN RT#84981) - Add -w and -i switches to diffnew.pl (CPAN RT#69945) - Remove Algorithm::DiffOld from the index; the module is still distributed with Algorithm::Diff, but is not indexed on CPAN because this is an ***UNAUTHORIZED*** release of Algorithm::DiffOld - Add patch to generate provide for perl(Algorithm::DiffOld) - Drop %defattr, redundant since rpm 4.4 - General spec tidy-up - Perl 5.22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Perl 5.24 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 2.24 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 2.26 bump - Perl 5.26 rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Do not run optional test on RHEL - 2.28 bump - Fixes CVE-2018-12015 (directory traversal) (bug #1588761) - 2.30 bump - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode - Resolves: RHEL-181654 - 2.30 bump - 2.28 bump - Fixes CVE-2018-12015 (directory traversal) (bug #1588761) - Do not run optional test on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Perl 5.26 rebuild - 2.26 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix CVE-2026-9538: cap per-entry declared size during tar read to defend against attacker-controlled size-field memory DoS - Resolves: RHEL-191913 - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode - Resolves: RHEL-181654 - 2.30 bump - 2.28 bump - Fixes CVE-2018-12015 (directory traversal) (bug #1588761) - Do not run optional test on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Perl 5.26 rebuild - 2.26 bump - 1.38 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - 1.40 bump in order to dual-live with perl 5.24 - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Upgrade to 1.42 as provided in perl-5.25.12 - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Prevent from some stack-not-ref-counted crashes in Carp (RT#52610) - 2.081 bump - 2.080 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Perl 5.26 rebuild - 2.074 bump - 2.072 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 2.081 bump - 2.080 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 2.076 bump - 2.075 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Perl 5.26 rebuild - 2.074 bump - Fix stack overflow and buffer overflow in DBI.xs (CVE-2026-9698) Resolves: RHEL-211160 - Fix heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution (CVE-2026-10879) Resolves: RHEL-227962 - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) Resolves: RHEL-211158 - Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739) Resolves: RHEL-193292 - BR: perl(blib), perl(FileHandle) for tests - 1.641 bump - Add build-require gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 1.640 bump - 1.639 bump - 1.637 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Force placeholder limit on :N and :pN placeholders (CVE-2026-73194) Resolves: RHEL-247320 - Fix stack overflow and buffer overflow in DBI.xs (CVE-2026-9698) Resolves: RHEL-211160 - Fix heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution (CVE-2026-10879) Resolves: RHEL-227962 - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) Resolves: RHEL-211158 - Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739) Resolves: RHEL-193292 - BR: perl(blib), perl(FileHandle) for tests - 1.641 bump - Add build-require gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 1.640 bump - 1.639 bump - 1.637 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting Resolves: RHEL-271960 - Force placeholder limit on :N and :pN placeholders (CVE-2026-73194) Resolves: RHEL-247320 - Fix stack overflow and buffer overflow in DBI.xs (CVE-2026-9698) Resolves: RHEL-211160 - Fix heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution (CVE-2026-10879) Resolves: RHEL-227962 - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) Resolves: RHEL-211158 - Fix heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739) Resolves: RHEL-193292 - BR: perl(blib), perl(FileHandle) for tests - 1.641 bump - Add build-require gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 1.640 bump - 1.639 bump - 1.637 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Fix postentry for quoted glob (bug #1532524) - Fix quoting glob names (RT#119831) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Perl 5.26 rebuild - Upgrade to 2.167 as provided in perl-5.25.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 1.161 bump - Replace versioned MODULE_COMPAT by non-versioned perl-libs - Package tests - Resolves: rhbz#2219504 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 1487801 - Rebase to upstream version 6.60. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - 1458071 - Rebase to upstream version 6.59. - 1428184 - Rebase to upstream version 6.58. - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 1400728 - Rebase to upstream version 6.57. - 1372494 - Rebase to upstream version 6.56. - 1372494 - Rebase to upstream version 6.55, build failed due to https://rt.cpan.org/Public/Bug/Display.html?id=117404. - Fix CVE-2026-60075: prevent ReDoS via crafted strings with long interior whitespace runs in date/time parsing - Resolves: RHEL-239807 - Replace versioned MODULE_COMPAT by non-versioned perl-libs - Package tests - Resolves: rhbz#2219504 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 1487801 - Rebase to upstream version 6.60. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - 1458071 - Rebase to upstream version 6.59. - 1428184 - Rebase to upstream version 6.58. - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 1400728 - Rebase to upstream version 6.57. - Perl 5.22 rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - Avoid loading optional modules from default . (CVE-2016-1238) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.24 rebuild - 2.55 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Increase release to favour standalone package - 2.97 bump - Preserve a warning on Perl 5.26.1 (bug #1544345) - 2.96 bump - 2.95 bump - 2.94 bump - 2.93 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - 2.92 bump - 2.91 bump - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Adjust tests to gdbm-1.15 (RT#133295) - Fix an integer wrap when allocating memory for an environment variable (RT#133204) - Fix printing a warning about a wide character when matching a regular expression while ISO-8859-1 locale is in effect - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect - Fix CVE-2026-13221 - Don't create a regex trie that would overflow - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuild to utilize perl(:VERSION) dependency symbol - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - Perl 5.24 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix CVE-2017-6512 (setting arbitrary mode on an arbitrary file in rmtree() and remove_tree()) (bug #1457834) - Perl 5.26 rebuild - 2.13 bump - Perl 5.26 re-rebuild of bootstrapped packages - 2.14 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - 2.15 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - Normalize package version to dotted decimal format - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Remove duplicate dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 0.2306 bump - 2.48 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - 2.49 bump - 2.49.1 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 2.50 bump - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update man page for CVE-2023-31486 - Changes the verify_SSL default parameter from 0 to 1 - CVE-2023-31486 - Resolves: rhbz#2228409 - 0.074 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 0.070 bump - 0.068 bump - 0.064 bump - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Adjust tests to gdbm-1.15 (RT#133295) - Fix an integer wrap when allocating memory for an environment variable (RT#133204) - Fix printing a warning about a wide character when matching a regular expression while ISO-8859-1 locale is in effect - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect - Fix CVE-2026-13221 - Don't create a regex trie that would overflow - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Adjust tests to zlib-1.2.11 (bug #1420012) - 2.072 bump - 2.074 bump - Perl 5.26 rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rewrite shell bangs using running perl - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 2.080 bump - 2.081 bump - Remove use of eval in File::GlobMapper for safer string interpolation - Resolves: RHEL-180411 - 2.081 bump - 2.080 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rewrite shell bangs using running perl - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Perl 5.26 rebuild - 2.074 bump - 2.072 bump - Increase release to favour standalone package - Perl 5.24 re-rebuild of bootstrapped packages - Migrate from Module::Build to ExtUtils::MakeMaker - Correct IO/Socket/IP.pm file mode - 0.38 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 0.39 bump - Perl 5.26 rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Default to PROFILE=SYSTEM cipher list (bug #1775167) - PublicSuffix.pm is licensed MPLv2.0 (#1724434) - Skip a PHA test if Net::SSLeay does not expose the PHA (bug #1633636) - Update to 2.066 (bug #1632600) - Client sends a post-handshake-authentication extension if a client key and a certificate are available (bug #1633636) - Prevent tests from dying on SIGPIPE (bug #1610017) - Update to 2.060 (bug #1610017) - Support for TLS 1.3 with OpenSSL 1.1.1 (needs Net::SSLeay ≥ 1.86); see also CPAN RT#126899 - TLS 1.3 support is not complete yet for session reuse - Adapt to OpenSSL 1.1.1, it requires patched Net-SSLeay (bug #1610017) - Enable tests (bug #1610017) - Update to 2.059 (bug #1610017) - Fix memory leak when CRLs are used (CPAN RT#125867) - Fix memory leak when using stop_SSL and threads (https://rt.cpan.org/Ticket/Display.html?id=125867#txn-1797132) - Disable %check so package will build for Mass Rebuild - Related: bug#1614611 - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Adjust tests to gdbm-1.15 (RT#133295) - Fix an integer wrap when allocating memory for an environment variable (RT#133204) - Fix printing a warning about a wide character when matching a regular expression while ISO-8859-1 locale is in effect - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect - Fix CVE-2026-13221 - Don't create a regex trie that would overflow - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Specfile autogenerated by cpanspec 1.78. - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Adjust tests to gdbm-1.15 (RT#133295) - Fix an integer wrap when allocating memory for an environment variable (RT#133204) - Fix printing a warning about a wide character when matching a regular expression while ISO-8859-1 locale is in effect - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect - Fix CVE-2026-13221 - Don't create a regex trie that would overflow - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.24 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - 20160104 bump - 20150826 bump - License changed from (MPLv1.1 or LGPLv2+ or GPLv2+) to (MPLv2.0) - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Perl 5.22 rebuild - Update to 1.88 (bug #1632597, bug #1633630) - OpenSSL 1.1.1 in Fedora disables SSL3 API, so stop trying to test it (bug #1610376) - Revert retry in Net::SSLeay::{read,write}() (bug #1610376) - Revert retry in Net::SSLeay::write_partial() (bug #1610376) - Avoid SIGPIPE in t/local/36_verify.t (bug #1610376) - Adapt to OpenSSL 1.1.1 (bug #1610376) - Adapt tests to system-wide crypto policy (bug #1610376) - Adapt tests to security level 2 system-wide crypt policy (bug #1610376) - Add missing call to va_end() in TRACE() (bug #1607018) - Disable %check so package will build for Mass Rebuild - Related: bug#1614611 - Update to 1.85 - Preparations for transferring maintenace to a new maintainer - Fixed test failure in t/local/33_x509_create_cert.t for some versions of OpenSSL - Fixed free() error that causes "Free to wrong pool ..." message on Windows - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 1.84 - Fixed an error in t/local/04_basic.t causing a test failure if Test::Exception not installed - Replace versioned MODULE_COMPAT by non-versioned perl-libs - Resolves: rhbz#2219504 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 1.21 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - 1.2 bump - Perl 5.26 rebuild - Restore compatibility with Perl 5.26.0 (CPAN RT#106685, CPAN RT#114776) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.24 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - 3.74 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Upgrade to 3.67 as provided in perl-5.25.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Avoid loading optional modules from default . (CVE-2016-1238) - Increase release to favour standalone package - 3.63 bump in order to dual-live with perl 5.24 - Specfile autogenerated by cpanspec 1.78. - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Perl 5.24 re-rebuild of bootstrapped packages - 3.26 bump - 3.27 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 3.28 bump - Introduce a build-condition on groff - Rename a _without_tk build-condition to _without_perl_Pod_Perldoc_enables_tk_test - Perl 5.26 rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 3.31 - update to 3.32 - Specify all dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - 3.35 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Perl 5.22 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - 1.68 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - 1.69 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 1489828 - Rebase to upstream version 1.49. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - 1464620 - Rebase to upstream version 1.48. - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 1408347 - Rebase to upstream version 1.47. - 1380561 - Rebase to upstream version 1.46. - Increase epoch to favour standalone package - Make Socket::inet_aton() thread safe (bug #1699793) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 2.027 bump - 2.026 bump - Fix compiler warnings (CPAN RT#124044) - 2.025 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Storable-3.11 source archive repackaged without a t/CVE-2015-1592.inc file (bug #1663711) - Do not package empty Storable::Limit(3pm) manual page - 3.11 bump - 3.09 bump - 3.06 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Upgrade to 2.62 as provided in perl-5.25.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.24 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Perl 5.22 rebuild - Perl 5.20 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.99 (#1385279) - Perl 5.24 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - 0.98 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - 4.04 bump - 4.05 bump - Perl 5.24 rebuild - 4.06 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Don't BR: perl(IPC::System::Simple) when bootstrapping - Perl 5.26 rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Specfile autogenerated by cpanspec 1.78. - 1.17 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - 1.43 bump - Updated source URL - Modernized the spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - 1.44 bump - Perl 5.24 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update tol 1.45 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 3.30 bump - Perl 5.22 rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Increase release number to compete with perl's sub-package - Fix manual pages names - Perl 5.22 rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - 1.24 bump - 1.25 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 1.27 bump - 1.28 bump - Perl 5.24 rebuild - Perl 5.24 re-rebuild of bootstrapped packages - Soften Business::ISBN dependency from Requires: to Suggests: to avoid pulling in gd and X libraries (#1380152) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Perl 5.26 re-rebuild of bootstrapped packages - 1.72 bump - 1.73 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Disable Business::ISBN feature - CVE-2026-19953 perl-URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization incorrect hostname encoding via missing Unicode normalization - Disable Business::ISBN feature - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 1.73 bump - 1.72 bump - Perl 5.26 re-rebuild of bootstrapped packages - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Soften Business::ISBN dependency from Requires: to Suggests: to avoid pulling in gd and X libraries (#1380152) - Perl 5.24 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 rebuild - Fixes for removal '.' from @INC in Perl 5.26 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - 1.25 bump - 1.24 bump - Perl 5.22 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - Perl 5.24 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Adjust tests to gdbm-1.15 (RT#133295) - Fix an integer wrap when allocating memory for an environment variable (RT#133204) - Fix printing a warning about a wide character when matching a regular expression while ISO-8859-1 locale is in effect - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect - Fix CVE-2026-13221 - Don't create a regex trie that would overflow - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Fix blocking in Net::FTP and other subclasses (bug #1360610) - 3.10 bump - Net::libnetFAQ document replaced with a hyper link because of the Artistic license (CPAN RT#117888) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Perl 5.26 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - 3.11 bump - Require Digest::MD5 for APOP login method - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Adjust tests to gdbm-1.15 (RT#133295) - Fix an integer wrap when allocating memory for an environment variable (RT#133204) - Fix printing a warning about a wide character when matching a regular expression while ISO-8859-1 locale is in effect - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect - Fix CVE-2026-13221 - Don't create a regex trie that would overflow - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Adjust tests to gdbm-1.15 (RT#133295) - Fix an integer wrap when allocating memory for an environment variable (RT#133204) - Fix printing a warning about a wide character when matching a regular expression while ISO-8859-1 locale is in effect - Fix invoking a check for wide characters while ISO-8859-1 locale is in effect - Fix CVE-2026-13221 - Don't create a regex trie that would overflow - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix CVE-2025-40909 - Clone dirhandles without fchdir - Fix test broken by update in zlib on s390x - Add definition of OPTIMIZE to .ph files, if optimizing is used (bug#2152012) - Fix a memory leak when compiling a regular expression with a non-word class (bug #2014981) - Fix _resolv return value in Net-Ping (bug #1973030) - Fix CVE-2020-10543 (bug #1839273) - Fix CVE-2020-10878 (bug #1839276) - Fix a file mode of a perl-example.stp example (bug #1913693) - Fix CVE-2020-12723 (bug #1839279) - Fix Time-Local tests to pass after year 2019 (bug #1807120) - Run-require perl(Encode) by perl-libs (bug #1903503) - 5.26.3 bump (bug #1655526) - Fix CVE-2018-18311 (integer overflow leading to buffer overflow) (bug #1654920) - Fix CVE-2018-18312 (heap buffer overflow in regcomp.c) (bug #1654922) - Fix CVE-2018-18313 (heap buffer overflow read in regcomp.c) (bug #1654924) - Fix CVE-2018-18314 (heap based buffer overflow) (bug #1654925) - Install Encode developmental files when installing complete Perl (bug #1645225) - Fix annocheck failure by passing CFLAGS to dtrace (bug #1630617) - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Increase release to favour standalone package - Update to 0.236 - Add Travis test configuration - Make test for PMC availability more reliable - Disable benchmark test rt62341.t as it runs out of memory on many smoker systems (CPAN RT#118310) - Simplify find command using -delete - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Increase release to favour standalone package - Update to 0.237 - Don't load vars.pm (CPAN RT#132077) - Drop legacy Group: tag - Drop buildroot cleaning in %install section - Increase release to favour standalone package - License declaration corrected to "(GPL+ or Artistic) and MIT" - 4.08 bump - 4.09 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Perl 5.26 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - 4.10 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 4.11 bump - License changed to (GPL+ or Artistic) and FSFAP - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 2.21 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 re-rebuild of bootstrapped packages - 2.16 bump - Perl 5.26 rebuild - 2.15 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - 2.12 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - 1.58 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Perl 5.26 re-rebuild of bootstrapped packages - 1.57 bump - Perl 5.26 rebuild - Upgrade to 1.56 as provided in perl-5.25.12 - Fix arenas allocation (RT#131124) - 1.55 bump - Rebuild to kick process (no changes from previous build) [1624161] - Fix annocheck gcc failures [1624161] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for new upstream release 2.3.4, fixes rhbz #1381067 - Spec clean up - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Update to 1.4.2 - Drop conditionals for old Fedora releases - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 1.4.1 - Move pc(5) manpage to main pkgconf package - Update to 1.4.0 - Add simple wrapper to support platform-specific pkg-config paths (#1513810) - Update to 1.3.90 - Update to 1.3.12 - Update to 1.3.10 - Update to 1.3.10 - Update to 1.3.12 - Update to 1.3.90 - Add simple wrapper to support platform-specific pkg-config paths (#1513810) - Update to 1.4.0 - Move pc(5) manpage to main pkgconf package - Update to 1.4.1 - Switch to %ldconfig_scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 1.4.2 - Drop conditionals for old Fedora releases - Update to 1.4.2 - Drop conditionals for old Fedora releases - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Update to 1.4.1 - Move pc(5) manpage to main pkgconf package - Update to 1.4.0 - Add simple wrapper to support platform-specific pkg-config paths (#1513810) - Update to 1.3.90 - Update to 1.3.12 - Update to 1.3.10 - Add AlmaLinux to supported distros - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Security fix for CVE-2023-6597 Resolves: RHEL-33671 - Fix build with expat with fixed CVE-2023-52425 Related: RHEL-33671 - Security fix for CVE-2023-27043 Resolves: RHEL-20610 - Security fix for CVE-2022-48564 Resolves: RHEL-16674 - Skip tests failing on s390x Resolves: RHEL-19252 - Security fix for CVE-2022-48560 Resolves: RHEL-16707 - Security fix for CVE-2023-40217 Resolves: RHEL-3041 - Fix symlink handling in the fix for CVE-2007-4559 Resolves: rhbz#263261 - Bump release for rebuild Resolves: rhbz#2173917 - Add AlmaLinux to supported distros - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Security fix for CVE-2023-6597 Resolves: RHEL-33671 - Fix build with expat with fixed CVE-2023-52425 Related: RHEL-33671 - Security fix for CVE-2023-27043 Resolves: RHEL-20610 - Add AlmaLinux to supported distros - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Security fix for CVE-2023-6597 Resolves: RHEL-33671 - Add AlmaLinux to supported distros - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Add AlmaLinux to supported distros - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Add AlmaLinux to supported distros - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Add AlmaLinux to supported distros - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add AlmaLinux to supported distros - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Add AlmaLinux to supported distros - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Add AlmaLinux to supported distros - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Add AlmaLinux to supported distros - Security fix for CVE-2026-15308 Resolves: RHEL-193772 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Add AlmaLinux to supported distros - Security fix for CVE-2026-11940 Resolves: RHEL-227194 - Security fix for CVE-2026-15308 Resolves: RHEL-193772 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Add AlmaLinux to supported distros - Security fixes for CVE-2026-12345, CVE-2026-19445, CVE-2026-19553 Resolves: RHEL-272935, RHEL-276260, RHEL-274107 - Security fix for CVE-2026-11940 Resolves: RHEL-227194 - Security fix for CVE-2026-15308 Resolves: RHEL-193772 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Require Python with tarfile filters Resolves: RHEL-25446 - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218241 - Remove bundled windows executables - Resolves: rhbz#2006788 - Support of yanked releases Resolves: rhbz#2000135 - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references Resolves: rhbz#1962856 - Fix bash completion files and simplify spec Resolves: rhbz#1904478 - Patch for pip install <url> allow directory traversal, leading to arbitrary file write Resolves: rhbz#1868016 - Remove unused CA bundle from the bundled requests library Resolves: rhbz#1775200 - Add four new patches for CVEs in bundled urllib3 and requests CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074 Resolves: rhbz#1649153 Resolves: rhbz#1700824 Resolves: rhbz#1702473 Resolves: rhbz#1643829 - Create python-pip-wheel package with the wheel Resolves: rhbz#1718031 - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 - Create /usr/local/lib/pythonX.Y when needed Resolves: rhbz#1808301 - Add subpackages with wheels Resolves: rhbz#1718032 - New subpackage platform-python-setuptools without files from /usr/bin/* - python3-setuptools contains only files from /usr/bin/* and depends on platform-python-setuptools - Resolves: rhbz#1641973 - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Do not use wheel on Python 2 - update to 39.2.0 Fixes bug #1572889 - Remove test requirements on python2 packages and some exotic packages - Skip tests on Python 2 - update to 39.0.1 Fixes bug #1531527 - Skip test_virtualenv due to broken executable detection - Security fix for CVE-2024-6345 Resolves: RHEL-50470 - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 - Create /usr/local/lib/pythonX.Y when needed Resolves: rhbz#1808301 - Add subpackages with wheels Resolves: rhbz#1718032 - New subpackage platform-python-setuptools without files from /usr/bin/* - python3-setuptools contains only files from /usr/bin/* and depends on platform-python-setuptools - Resolves: rhbz#1641973 - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Do not use wheel on Python 2 - update to 39.2.0 Fixes bug #1572889 - Remove test requirements on python2 packages and some exotic packages - Skip tests on Python 2 - update to 39.0.1 Fixes bug #1531527 - Security fix for CVE-2025-47273 Resolves: RHEL-96802 - Security fix for CVE-2024-6345 Resolves: RHEL-50470 - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 - Create /usr/local/lib/pythonX.Y when needed Resolves: rhbz#1808301 - Add subpackages with wheels Resolves: rhbz#1718032 - New subpackage platform-python-setuptools without files from /usr/bin/* - python3-setuptools contains only files from /usr/bin/* and depends on platform-python-setuptools - Resolves: rhbz#1641973 - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Do not use wheel on Python 2 - update to 39.2.0 Fixes bug #1572889 - Remove test requirements on python2 packages and some exotic packages - Skip tests on Python 2 - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Update translations (#1962009) - python/semanage: Allow modifying records on "add" (RHEL-28167) - python/semanage: Do not sort local fcontext definitions (RHEL-24461) - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Update translations (#1962009) - python/semanage: Allow modifying records on "add" (RHEL-28167) - python/semanage: Do not sort local fcontext definitions (RHEL-24461) - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Update translations (#1962009) - python/semanage: Allow modifying records on "add" (RHEL-28167) - python/semanage: Do not sort local fcontext definitions (RHEL-24461) - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Update translations (#1962009) - python/semanage: Allow modifying records on "add" (RHEL-28167) - python/semanage: Do not sort local fcontext definitions (RHEL-24461) - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Update translations (#1962009) - python/semanage: Allow modifying records on "add" (RHEL-28167) - python/semanage: Do not sort local fcontext definitions (RHEL-24461) - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Update translations (#1962009) - python/semanage: Allow modifying records on "add" (RHEL-28167) - python/semanage: Do not sort local fcontext definitions (RHEL-24461) - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - Backport changing dependency to mozjs60 - Resolves: rhbz#1729416 - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled - Mitigation of regression caused by fix of CVE-2018-19788 - Resolves: rhbz#1693781 - Resolves: rhbz#1693814 - Fix of CVE-2019-6133, PID reuse via slow fork - Resolves: rhbz#1667778 - PolkitPermission re-check on real session changes - Resolves: RHEL-34029 - reduce waking session monitor on uninteresting session changes - make polkit-pkla-compat uninstallable (for cases when no .pkla on system) - Resolves: RHEL-34029 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - Backport changing dependency to mozjs60 - Resolves: rhbz#1729416 - Fix a memory leak in session state changes - Resolves: RHEL-187078 - PolkitPermission re-check on real session changes - Resolves: RHEL-34029 - reduce waking session monitor on uninteresting session changes - make polkit-pkla-compat uninstallable (for cases when no .pkla on system) - Resolves: RHEL-34029 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - Backport changing dependency to mozjs60 - Resolves: rhbz#1729416 - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled - Mitigation of regression caused by fix of CVE-2018-19788 - Resolves: rhbz#1693781 - Resolves: rhbz#1693814 - Fix of CVE-2019-6133, PID reuse via slow fork - Resolves: rhbz#1667778 - PolkitPermission re-check on real session changes - Resolves: RHEL-34029 - reduce waking session monitor on uninteresting session changes - make polkit-pkla-compat uninstallable (for cases when no .pkla on system) - Resolves: RHEL-34029 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - Backport changing dependency to mozjs60 - Resolves: rhbz#1729416 - Fix a memory leak in session state changes - Resolves: RHEL-187078 - PolkitPermission re-check on real session changes - Resolves: RHEL-34029 - reduce waking session monitor on uninteresting session changes - make polkit-pkla-compat uninstallable (for cases when no .pkla on system) - Resolves: RHEL-34029 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - Backport changing dependency to mozjs60 - Resolves: rhbz#1729416 - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled - Mitigation of regression caused by fix of CVE-2018-19788 - Resolves: rhbz#1693781 - Resolves: rhbz#1693814 - Fix of CVE-2019-6133, PID reuse via slow fork - Resolves: rhbz#1667778 - PolkitPermission re-check on real session changes - Resolves: RHEL-34029 - reduce waking session monitor on uninteresting session changes - make polkit-pkla-compat uninstallable (for cases when no .pkla on system) - Resolves: RHEL-34029 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - Backport changing dependency to mozjs60 - Resolves: rhbz#1729416 - Fix a memory leak in session state changes - Resolves: RHEL-187078 - PolkitPermission re-check on real session changes - Resolves: RHEL-34029 - reduce waking session monitor on uninteresting session changes - make polkit-pkla-compat uninstallable (for cases when no .pkla on system) - Resolves: RHEL-34029 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - Backport changing dependency to mozjs60 - Resolves: rhbz#1729416 - pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled - Mitigation of regression caused by fix of CVE-2018-19788 - Resolves: rhbz#1693781 - Resolves: rhbz#1693814 - Fix of CVE-2019-6133, PID reuse via slow fork - Resolves: rhbz#1667778 - PolkitPermission re-check on real session changes - Resolves: RHEL-34029 - reduce waking session monitor on uninteresting session changes - make polkit-pkla-compat uninstallable (for cases when no .pkla on system) - Resolves: RHEL-34029 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - Backport changing dependency to mozjs60 - Resolves: rhbz#1729416 - Fix a memory leak in session state changes - Resolves: RHEL-187078 - PolkitPermission re-check on real session changes - Resolves: RHEL-34029 - reduce waking session monitor on uninteresting session changes - make polkit-pkla-compat uninstallable (for cases when no .pkla on system) - Resolves: RHEL-34029 - pkttyagent gets stopped if killed in the background - Resolves: rhbz#2128989 - file descriptor exhaustion (GHSL-2021-077) - Resolves: CVE-2021-4115 - pkexec: argv overflow results in local privilege esc. - Resolves: CVE-2021-4034 - early disconnection from D-Bus results in privilege esc. - Resolves: CVE-2021-3560 - pkttyagent: resetting terminal erases rest of input line - Resolves: rhbz#1757853 - Fix of jasuthority memleak - Resolves: rhbz#1745918 - Rebuild to reflect mozjs60 s390 abi change - Related: rhbz#1746889 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update URL: and Source0: to point to Pagure instead of fedorahosted.org Resolves: #1502386 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Rebase to popt 1.18 (https://github.com/rpm-software-management/popt/releases/tag/popt-1.18-release) - Update URLs to rebooted upstream - Clean up ancient cruft from spec, use modern build macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Added upstream patch to handle glob(3) error returns (#1051685) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Make it use %autosetup -S git - Fix a memory leak - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebase to popt 1.18 (https://github.com/rpm-software-management/popt/releases/tag/popt-1.18-release) - Update URLs to rebooted upstream - Clean up ancient cruft from spec, use modern build macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Added upstream patch to handle glob(3) error returns (#1051685) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Make it use %autosetup -S git - Fix a memory leak - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Enable hardened build. - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - RHEL-2863 - Creating tmp files for systemd on behalf of portreserve references legacy directory /var/run/ instead of /run - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Enable hardened build. - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Fixed possible warning when postfix is restarted Resolves: rhbz#2162659 - Fix patch for SRV record resolution feature Related: rhbz#1787010 - Backport dns SRV record resolution feature (RFC6186) Resolves: rhbz#1787010 - Fix building in ZUUL CI Resolves: rhbz#2196577 - Added SELinux workound for systemd service to work after 'postfix start' Resolves: rhbz#2028015 - Fixed pflogsumm to allow underscores in the syslog_name Resolves: rhbz#1931403 - Fixed cleanup crash when processing messages with whitespace only fullname Resolves: rhbz#1977732 - New version Resolves: rhbz#1688389 - Fixed DNS resolver to use ref_search instead of ref_query Resolves: rhbz#1723950 - Added hostname requirement Resolves: rhbz#1666244 - Release bump and rebuild for relengs to be able to ship postfix-pcre, postfix-cdb, postfix-sqlite Resolves: rhbz#1745321 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176548 - Fixed possible warning when postfix is restarted Resolves: rhbz#2162659 - Fix patch for SRV record resolution feature Related: rhbz#1787010 - Backport dns SRV record resolution feature (RFC6186) Resolves: rhbz#1787010 - Fix building in ZUUL CI Resolves: rhbz#2196577 - Added SELinux workound for systemd service to work after 'postfix start' Resolves: rhbz#2028015 - Fixed pflogsumm to allow underscores in the syslog_name Resolves: rhbz#1931403 - Fixed cleanup crash when processing messages with whitespace only fullname Resolves: rhbz#1977732 - New version Resolves: rhbz#1688389 - Fixed DNS resolver to use ref_search instead of ref_query Resolves: rhbz#1723950 - Added hostname requirement Resolves: rhbz#1666244 - Fixed buffer overflow in the eap_request and eap_response functions Resolves: CVE-2020-8597 - Fixed some issues found by coverity scan Resolves: rhbz#1602665 - Split out the network-scripts Resolves: rhbz#1608377 - Replaced initscripts requirement by the network-scripts Resolves: rhbz#1610285 - Updated EAP-TLS patch to v1.101 Resolves: CVE-2018-11574 - Link with -E not to break plugins Resolves: rhbz#1564459 - Also build all DSOs with distro's LDFLAGS Related: rhbz#1563157 - Build with distro's LDFLAGS Resolves: rhbz#1563157 - Used openssl for the DES instead of the libcrypt / glibc Resolves: rhbz#1556132 - Escape macros in %changelog - rebuild with non-SCL toolset - if interface has name in expected format print it to stdout (#1643515) - don't assign names to virtual devices (#1644294) - never rename interfaces that already have names in expected format (#1631650) - dracut: introduce new dracut module that includes prefixdevname to initrd.img - udev: assign new name to the interface directly by assigning to NAME - initial package - CVE-2023-4016: ps: possible buffer overflow - Resolves: rhbz#2228503 - version bump requested to create -devel subpkg for CRB inclusion - Resolves: rhbz#2164781 - ps: out-of-bonds read in quick mode - Resolves: rhbz#2153813 - ps: revert increase command name length to 64 ____ (catch up) - Resolves: rhbz#2144978 - display.c: backport: async-signal-unsafe handler deadlocks on SIGHUP - Resolves: rhbz#2141696 - pgrep: backport uid/gid overflow fix - Resolves: rhbz#1827731 - vmstat: added -y option to omit first report - Resolves: rhbz#2027350 - sysctl: backport config directory order, align with systemd - Resolves: rhbz#2111915 - uptime: human readable data not shown if 364 days up - Resolves: rhbz#1772999 - pidof: option for separator collides with other option - Resolves: rhbz#1895985 - version bump due to unspotted malformed backport patch - Resolves: rhbz#1860486 - Resolves: rhbz#1894526 - Related: rhbz#1803640 - CVE-2023-4016: ps: possible buffer overflow - Resolves: rhbz#2228503 - version bump requested to create -devel subpkg for CRB inclusion - Resolves: rhbz#2164781 - ps: out-of-bonds read in quick mode - Resolves: rhbz#2153813 - ps: revert increase command name length to 64 ____ (catch up) - Resolves: rhbz#2144978 - display.c: backport: async-signal-unsafe handler deadlocks on SIGHUP - Resolves: rhbz#2141696 - pgrep: backport uid/gid overflow fix - Resolves: rhbz#1827731 - vmstat: added -y option to omit first report - Resolves: rhbz#2027350 - sysctl: backport config directory order, align with systemd - Resolves: rhbz#2111915 - uptime: human readable data not shown if 364 days up - Resolves: rhbz#1772999 - pidof: option for separator collides with other option - Resolves: rhbz#1895985 - version bump due to unspotted malformed backport patch - Resolves: rhbz#1860486 - Resolves: rhbz#1894526 - Related: rhbz#1803640 - python-3.6 introduced changes in flush() sanitizing: gating fails - Resolves: rhbz#1651769 - output is not redirected when ps_mem is killed - Resolves: rhbz#1651769 - gating activated - cmdline unwanted blank spaces fixed - Resolves: rhbz#1780986 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild for Python 3.6 - Fixed missing BuildRequire - Latest upstream release - Package ported to Python3 with dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - SPEC - changes in Requires and BuildRequires - systemd and gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - lastcomm: added new --pid option to show process PID and PPID - changelog update: 6.6.3-1 author change - spec file update: added correct access mode to created /var/account/pacct - New upstream release 6.6.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - pstree -al incorrectly handles large empty cmdline - Resolves: rhbz#1715509 - backport of patch fixing fuser stalling NFS on non-existent file - Resolves: rhbz#1693785 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebase to the newest upstream official release - Source0 updated to latest functional SourceForge URL format - peekfd manpage now not present if peekfd binary missing on given architecture - URL of the project updated - new tool pslog added with rebase - Resolves: #1460695 - Add missing %license macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Recent revision - 20170809 - Recent revision - 20170828 - Recent revision - 20171028 - Recent revision - 20171228 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Recent revision - 20180223 - Recent revision - 20180328 - Recent revision - 20180419 - Recent revision - 20180514 - Recent revision - 20180723 - Recent revision - 20170809 - Recent revision - 20170828 - Recent revision - 20171028 - Recent revision - 20171228 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Recent revision - 20180223 - Recent revision - 20180328 - Recent revision - 20180419 - Recent revision - 20180514 - Recent revision - 20180723 - Initial package. - Address rpmlint issues - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Modernize spec - Use python2-setuptools, add with_python3 - New upstream release 0.23.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release 0.24.0 - Cleanup spec file conditionals - Drop Python 2 subpackages from RHEL 8, fixes RHBZ#1589755 - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates resolves: rhbz#1767054 - move audit rules to shared data directory resolves: rhbz#1746018 - Breakup 30-ospp-v42.rules into more granular files resolves: rhbz#1740798 - auditctl(8) needs clarification for backlog_limit resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Allow defining rules for /usr/lib/modules dir Resolves: RHEL-59013 - augenrules: fix return code if immutable mode is set Resolves: RHEL-40109 - Rebase audit to latest upstream release Resolves: RHEL-15001 - Introduce new fanotify record fields Resolves: rhbz#2216668 - invalid use of flexible array member Resolves: rhbz#2116867 - Drop ProtectHome from auditd.service as it interferes with rules Resolves: rhbz#2071727 - Default systemd service config blocks audit watch rules in some directories - Fix path normalization in auparse Resolves: rhbz#2062612 - auparse missing information when used with --format-text - Adjust sample-rules dir permissions Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users - New upstream release - 3.0.7 Related: rhbz#1939406 - Rebase audit package on 8.6 Resolves: rhbz#1939406 Resolves: rhbz#1906065 Resolves: rhbz#1921447 Resolves: rhbz#1927884 Resolves: rhbz#1921658 resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates (bpf patch) resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Fix CVE-2023-1981 (#2186688) - fix file attributes for /run/avahi-daemon (RHEL-5631) - fix two memory leaks (RHEL-43458) - Fix CVE-2021-3468 (RHEL-9542) - Fix CVE-2023-38469 (RHEL-5635) - Fix CVE-2023-38471 (RHEL-5639) - Fix CVE-2023-38473 (RHEL-5643) - Fix CVE-2023-38472 (RHEL-5644) - Fix CVE-2023-38470 (RHEL-5640) - Reduce log level of "Could not load BootEntry" messages. - Raise more appropriate LookupError on unknown BLS keys. - Test upstream packaging. - Fix packaging issues. - Update to new upstream release 1.0. - Update to new upstream release 1.1. - Add caching of kernel and init ramdisk images. - Fix unicode entries handling. - Add tracebacks when --debug is used. - Update to bug fix release 1.2. - Fix RHEL-8 profiles. - Fix --add/del-opt precedence. - Fix backup image reference counting. - Check for duplicates consistently in the clone and edit commands. - Apply correct command line precedence to --add-opts and --del-opts. - Correctly merge multiple --add/del-opts when editing or cloning. - Correctly propagate --add/del-opts in boom edit commands. - Enhanced logging of --add/del-opts merge logic. - The default Python interpreter is now /usr/bin/python. - Fixed re-ordering of options modifications when read from disk. - Do not set BootParams attributes for anonymous option words. - Make lvm_root_lv validation checks more strict. - Improve BootParams.from_entry() parameter recovery debug logging. - Include sample OsProfile for Fedora 32. - Re-set sandbox state in test suite to ensure run-to-run consistency. - Improve compatibility with Red Hat BLS implementation. - Allow non-boom managed entries to be listed and displayed. - Handle quirks in Red Hat's use of the BLS machine_id key. - Allow grub2 bootloader variables to be expanded when cloning entries. - Simplify clone_entry logic and make consistent with edit_entry. - Ensure stable ordering of legacy boot entry configuration. - Fix --grub-id option handling. - Backport from_buffer(..., require_writable=True), resolves rhbz#2172416 - Enable upstream tests - Build doc package, resolves rhbz#1641665 - No python2 in RHEL8 - Disable tests to fix mock-only FTBFS. - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - New release 1.11.5 - Escape macros in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New release 1.11.0 - Fix %check - Cleanup spec file conditionals - Update to 2.3.0 (#1150536) - Rebuild for Python 3.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 3.0.4 (#1441436) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Python 2 binary package renamed to python2-chardet See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Remove the Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1590397 - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - Translated using Weblate (Spanish) (ptoscano@redhat.com) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - Translated using Weblate (German) (atalanttore@googlemail.com) - New extraction for translatable strings (ptoscano@redhat.com) - Base DBusServerStubProvider on SubManFixture (mhorky@redhat.com) - Mark D-Bus tests (mhorky@redhat.com) - Remove unused classes of DBus tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Unregister (mhorky@redhat.com) - ENT-5350: Implement "force" register option in rhsm dbus python bindings (mhorky@redhat.com) - ENT-5533: Fix failures of D-Bus' Register tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Register (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Products (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of AllFacts (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Entitlement (mhorky@redhat.com) - Fix typo in method name of EntitlementService (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Consumer (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Attach (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Config (mhorky@redhat.com) - Skip AsyncPool tests (mhorky@redhat.com) - Catch generic OSError during BaseRestLib._request() (ptoscano@redhat.com) - Catch also CertificateLoadingError for identity cert loading (ptoscano@redhat.com) - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com) - Improve formatting of CertificateLoadingError (ptoscano@redhat.com) - Raise a new CertificateLoadingError on X.509 loading failures (ptoscano@redhat.com) - Improve formatting of UnknownContentException (ptoscano@redhat.com) - connection: improve the internal UnknownContentException (ptoscano@redhat.com) - utils: add terminal_printable_content (ptoscano@redhat.com) - connection: rename NetworkException to UnknownContentException (ptoscano@redhat.com) - Improve formatting of ProxyException (ptoscano@redhat.com) - connection: improve the internal ProxyException (ptoscano@redhat.com) - Improve formatting of socket.gaierror (ptoscano@redhat.com) - Improve formatting of ConnectionError (ptoscano@redhat.com) - Improve formatting of BadCertificateException (ptoscano@redhat.com) - connection: extend BadCertificateException w/ SSL exception (ptoscano@redhat.com) - connection: drop dead code (ptoscano@redhat.com) - ENT-4286: Additional fix for exception handling (jajerome@redhat.com) - ENT-4286: Simplify exception reporting with system_exit() (jajerome@redhat.com) - Cloud-what: Make saving token file more robust (jhnidek@redhat.com) - Remove deprecated function call (mhorky@redhat.com) - Fix failures of D-Bus' Register tests (mhorky@redhat.com) - Show locals in pytest output (mhorky@redhat.com) - tito: add rhel 8.8 releaser (ptoscano@redhat.com) - Translated using Weblate (Japanese) (suanand@redhat.com) - Translated using Weblate (French) (vincent.lefebvre59@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - ENT-5510: Fix issues with proxy and cockpit interaction (jajerome@redhat.com) - 2118486: [1.28] Implement "force" register option in rhsm dbus python binding (jajerome@redhat.com) - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Italian) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Spanish) (fserrador@gmail.com) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (French) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (German) (atalanttore@googlemail.com) - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - tests: fix mocking of get_terminal_width() in TestColumnize (ptoscano@redhat.com) - feat: print compliance errors & syspurpose status only in entitlement mode (ptoscano@redhat.com) - feat: print "registered" as status when using SCA (ptoscano@redhat.com) - feat: print "not registered" on status when not registered (ptoscano@redhat.com) - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com) - refactor: move determination of content access mode in own method (ptoscano@redhat.com) - tests: move StubIdentity to stubs (ptoscano@redhat.com) - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com) - chore: move banner printing to its own function (ptoscano@redhat.com) - ci: bump actions/upload-artifact from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - ci: bump actions/checkout from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - test: cockpit: switch to CERT auth for insights-client (ptoscano@redhat.com) - test: cockpit: mock-insights: implement upload and delete platform endpoints (ptoscano@redhat.com) - test: cockpit: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com) - test: cockpit: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com) - feat: cockpit: switch from .last-upload.results to .lastupload (ptoscano@redhat.com) - chore: cockpit: test: use the new syspurpose command (ptoscano@redhat.com) - test: cockpit: wait more when registering to Insights (ptoscano@redhat.com) - test: cockpit: break insights-client in a different way (ptoscano@redhat.com) - test: cockpit: mock-insights: return 404 for missing systems in /systems (ptoscano@redhat.com) - test: cockpit: wait longer in certain situations (ptoscano@redhat.com) - test: cockpit: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com) - chore(ci): Use Vault for CentOS Stream 8 (mhorky@redhat.com) - fix: Hide subscription management "errors" in container mode (mhorky@redhat.com) - feat: 1.28 Added more AWS cloud facts (jhnidek@redhat.com) - feat: 1.28 Added zone GCP fact (jhnidek@redhat.com) - feat: 1.28 Azure: added extended location and type of location fact (jhnidek@redhat.com) - fix: 1.28 Update version of Azure metadata (jhnidek@redhat.com) - feat: 1.28 Added Azure location to facts (jhnidek@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - Simplify spec file - Improve spec file - Add tests - Fix descriptions - Fix for F22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Rebuild for Python 3.6 - Disable python3 tests for now - Enable tests - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Remove the Python 2 version https://bugzilla.redhat.com/show_bug.cgi?id=1567146 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Python 2 binary package renamed to python2-configshell See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Update spec file conditionals - New upstream release - Remove patch configshell-fix-term.patch - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Drop the Python2 subpackage - Update to new upstream version - Update to new upstream version - Update to a new upstream version - Fix FTBFS caused by rsa_pkcs1_implicit_rejection OpenSSL feature, resolves: RHEL-17873 - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172404 - Rebuild for RHEL 8.5 - Resolves: rhbz#1933071 - CVE-2020-36242: Fixed a bug where certain sequences of update() calls when symmetrically encrypting very large payloads (>2GB) could result in an integer overflow, leading to buffer overflows. - Resolves: rhbz#1926528 - Conflict with non-matching vector package - Re-add remove NPN bindings, required for pyOpenSSL - Resolves: rhbz#1907429 - Rebase to upstream release 3.2.1 - Resolves: rhbz#1873581 - Resolves: rhbz#1778939 - Removed dependencies on python-asn1crypto, python-idna - Don't activate custom osrandom engine for FIPS compliance - Resolves: rhbz#1762667 - Use TLSv1.2 in test as workaround for RHBZ#1615099 - Resolves: RHBZ#1611738 - New upstream release 2.3 - Fix AEAD tag truncation bug, CVE-2018-10903, RHBZ#1602755, RHBZ#1602932 - Fix CVE-2023-49083: NULL-dereference when loading PKCS7 certificates, resolves RHEL-97452 - Fix FTBFS caused by rsa_pkcs1_implicit_rejection OpenSSL feature, resolves: RHEL-17873 - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172404 - Rebuild for RHEL 8.5 - Resolves: rhbz#1933071 - CVE-2020-36242: Fixed a bug where certain sequences of update() calls when symmetrically encrypting very large payloads (>2GB) could result in an integer overflow, leading to buffer overflows. - Resolves: rhbz#1926528 - Conflict with non-matching vector package - Re-add remove NPN bindings, required for pyOpenSSL - Resolves: rhbz#1907429 - Rebase to upstream release 3.2.1 - Resolves: rhbz#1873581 - Resolves: rhbz#1778939 - Removed dependencies on python-asn1crypto, python-idna - Don't activate custom osrandom engine for FIPS compliance - Resolves: rhbz#1762667 - Use TLSv1.2 in test as workaround for RHBZ#1615099 - Resolves: RHBZ#1611738 - Update to 2.6.0 (RHBZ #1393159) - Rebuild for Python 3.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Upstream 2.6.1 - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Use Python 3 Sphinx - Drop the python2 subpackage - Change license to BSD - Backport patch from Neal Gompa <ngompa13@gmail.com> to generate pythonXdist metadata - Conditionalize the python2 subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Cleanups in packaging - Also add Provides for the old name without %_isa - Use %python_provide for the python3 subpackage and drop manual Provide which conflicts with %python_provide in the python2 subpackage. - Python 2 binary package renamed to python2-dbus See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - SPEC Cleanup - Remove unused build requires - Rebuild for Python 3.6 - Remove SOURCES.txt~ file. Fixes bug #1404634 - Update to 4.0.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 4.1.2. Fixes bug #1471373 - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Upstream 4.2.1 - Python 2 subpackage disabled by default - AlmaLinux changes - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245) - Fix japanese translations (RHEL-6393) - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786) - Document symbols in `dnf history list` output (RhBug:2172067) - Return an error when transaction fails (RhBug:2170093) - Omit src RPMs from check-update (RhBug:2151910,2203069) - automatic: Fix online detection with proxy (RhBug:2022440,2189851) - Update translations - Ignore processing variable files with unsupported encoding (RhBug:2141215) - Better explain traceback of rpm.error with dnf - Document changes to offline-upgrade command (RhBug:1939975,2139324) - Add support for rollback of group upgrade rollback (RhBug:2016070) - Move system-upgrade plugin to core (RhBug:2054235) - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309) - Allow passing plugin parameters with dashes in names (RhBug:1980712) - Fix upgrade from file to noarch pkg (RhBug:2006018) - Add support for group upgrade rollback (RhBug:2016070) - Expose plugin unload method to API (RhBug:2047251) - Add doc related to --destdir and --downloadonly options (RhBug:2100811) - Set default value for variable to prevent crash (RhBug:2091636) - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421) - Added patch for almalinux bugtracker - automatic: catch OSError, not SMTPException on smtp errors (RHEL-71545) - automatic: Check availability of config file (RHEL-71545) - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245) - Fix japanese translations (RHEL-6393) - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786) - Document symbols in `dnf history list` output (RhBug:2172067) - Return an error when transaction fails (RhBug:2170093) - Omit src RPMs from check-update (RhBug:2151910,2203069) - automatic: Fix online detection with proxy (RhBug:2022440,2189851) - Update translations - Ignore processing variable files with unsupported encoding (RhBug:2141215) - Better explain traceback of rpm.error with dnf - Document changes to offline-upgrade command (RhBug:1939975,2139324) - Add support for rollback of group upgrade rollback (RhBug:2016070) - Move system-upgrade plugin to core (RhBug:2054235) - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309) - Add microcode_ctl to a reboot list (RHEL-17356) - Fix for strange issue with binary garbage in smaps files (RHEL-6392, RhBug:2212953) - Add patch: Fix zlib reboot requirement (RhBug:2092033) - Add fix and test assertion for "no systemd unit exists for pid" - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2208444) - versionlock: Use only the most specific NEVRA (RhBug:1961217) - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157) - Doc update for reposync (RhBug:2132383,2182004) - reposync: Implement --safe-write-path option (RhBug:1898089,2203766) - Update translations - Show downstream warning during system-upgrade - offline-upgrade: add support for security filters (RhBug:1939975,2139324) - Move system-upgrade plugin to core (RhBug:2054235) - Move system-upgrade plugin to core (RhBug:2054235) - Add microcode_ctl to a reboot list (RHEL-17356) - Fix for strange issue with binary garbage in smaps files (RHEL-6392, RhBug:2212953) - Add patch: Fix zlib reboot requirement (RhBug:2092033) - Add fix and test assertion for "no systemd unit exists for pid" - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2208444) - versionlock: Use only the most specific NEVRA (RhBug:1961217) - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157) - Doc update for reposync (RhBug:2132383,2182004) - reposync: Implement --safe-write-path option (RhBug:1898089,2203766) - Update translations - Show downstream warning during system-upgrade - offline-upgrade: add support for security filters (RhBug:1939975,2139324) - Move system-upgrade plugin to core (RhBug:2054235) - Move system-upgrade plugin to core (RhBug:2054235) - Add microcode_ctl to a reboot list (RHEL-17356) - Fix for strange issue with binary garbage in smaps files (RHEL-6392, RhBug:2212953) - Add patch: Fix zlib reboot requirement (RhBug:2092033) - Add fix and test assertion for "no systemd unit exists for pid" - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2208444) - versionlock: Use only the most specific NEVRA (RhBug:1961217) - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157) - Doc update for reposync (RhBug:2132383,2182004) - reposync: Implement --safe-write-path option (RhBug:1898089,2203766) - Update translations - Show downstream warning during system-upgrade - offline-upgrade: add support for security filters (RhBug:1939975,2139324) - Move system-upgrade plugin to core (RhBug:2054235) - Move system-upgrade plugin to core (RhBug:2054235) - Security fix for CVE-2023-29483 Resolves: RHEL-32630 - Fix comparison between float and None types Resolves: rhbz#2075187 - Release bump for gating Related: rhbz#1731081 - Fix unicode label escaping Resolves: rhbz#1731081 - Drop python2 subpackage (#1567168) - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Cleanup spec file conditionals - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Add functional test to python-ethtool - Resolves: rhbz#2051609 - Rebuild for rhel-8.6, no functional change - Resolves: rhbz#2042222 - Backport patch from upstream/rhel7 which allows pifconfig to show multiple IPv4 addresses for each interface - Move patches to dist-git - Resolves: rhbz#1652174 - Backport upstream bugfix patch - Resolves: rhbz#1637918 - New upstream version - Resolves: rhbz#1606952 - Remove the Python 2 version https://bugzilla.redhat.com/show_bug.cgi?id=1567419 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Updated to 0.13 - Added python3 and python2 subpackages - Add --with tests - Modernize spec - Remove merged patch - Update upstream URL - fix(service): update highest port number for ceph - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - fix(nftables): batch ipset elements to avoid O(n^2) insertion cost - Resolves: almalinux/almalinux-deploy#186 - fix(policy): allow-host-ipv6: allow MLD packets - fix(service): update highest port number for ceph - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(nftables): batch ipset elements to avoid O(n^2) insertion cost - Resolves: almalinux/almalinux-deploy#186 - bump NVR - fix(policy): allow-host-ipv6: allow MLD packets - fix(service): update highest port number for ceph - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - change default CleanupModulesOnExit=yes - feat(config): add CleanupModulesOnExit configuration option - change default CleanupModulesOnExit=yes - fix(zone): detect same source/interface in zones - fix(nftables): rich: source address with netmask - fix(nftables): do not log icmp block if inversion - docs(firewall-*cmd): client conntrack helpers must use a policy - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - change default CleanupModulesOnExit=yes - feat(config): add CleanupModulesOnExit configuration option - change default CleanupModulesOnExit=yes - feat(direct): avoid iptables flush if using nftables backend - feat(rich): support "burst" attribute to limit in rich rules - fix(rich): validate service name of rich rule - feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types - feat(rich): support using ipset in destination - fix(nftables): always flush main table on start - fix(ipset): fix configuring IP range for ipsets with nftables - fix(ipset): exception on overlap checking empty set - rebase to v0.9.11 - change default CleanupModulesOnExit=yes - Add lock to avoid two type object wrappers getting generated at the same time in multi-threaded programs. Resolves: #1844578 - Update to 3.28.3 - Remove the python2 subpackages https://bugzilla.redhat.com/show_bug.cgi?id=1590819 - Update to 3.28.2 - Update to 3.28.1 - Update to 3.28.0 - Update to 3.27.5 - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 3.27.1 - add libassuan-devel to devel pkg requirements (#RHEL-6920) - Added patch for almalinux bugtracker - Added patch to support multiple keys - Set default SELinux labels on GnuPG directories (RHEL-6421) - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244) - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253) - Update translations - Support "proxy=_none_" in main config (RhBug:2155713) - Add repoid to solver error messages (RhBug:2179409,2179413) - Update translations - Allow change of arch during security updates with noarch (RhBug:2124483) - Fix listing a repository without cpeid (RhBug:2066334) - Add obsoletes to filtering for advisory candidates - Added patch for almalinux bugtracker - Added patch to support multiple keys - Do not set a default SELinux creation context if SELinux appears to be disabled (RHEL-43231) - Set default SELinux labels on GnuPG directories (RHEL-6421) - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244) - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253) - Update translations - Support "proxy=_none_" in main config (RhBug:2155713) - Add repoid to solver error messages (RhBug:2179409,2179413) - Update translations - Allow change of arch during security updates with noarch (RhBug:2124483) - Fix listing a repository without cpeid (RhBug:2066334) - Added patch for almalinux bugtracker - Added patch to support multiple keys - Fix calculating a difference between two same-version RPM transactions (RHEL-68770) - Do not set a default SELinux creation context if SELinux appears to be disabled (RHEL-43231) - Set default SELinux labels on GnuPG directories (RHEL-6421) - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244) - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253) - Update translations - Support "proxy=_none_" in main config (RhBug:2155713) - Add repoid to solver error messages (RhBug:2179409,2179413) - Update translations - Allow change of arch during security updates with noarch (RhBug:2124483) - Ship python2-idna - Enable python3 for EPEL - Modernize spec - Rebuild for Python 3.6 - Update to version 2.2 (#1406757) - Resolves: rhbz#1427499 Update to 2.3 for IDNAError bugfix and memory improvement - Update to version 2.4 - Update to version 2.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Drop Python 2 subpackage from RHEL 8, fixes RHBZ#1590399 - Fix patch application for security fix for CVE-2024-3651 Resolves: RHEL-32703 - Security fix for CVE-2024-3651 Resolves: RHEL-32703 - Drop Python 2 subpackage from RHEL 8, fixes RHBZ#1590399 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to version 2.5 - Update to version 2.4 - Resolves: rhbz#1427499 Update to 2.3 for IDNAError bugfix and memory improvement - Update to version 2.2 (#1406757) - Security fix for CVE-2026-45409 Resolves: RHEL-215650 - Fix patch application for security fix for CVE-2024-3651 Resolves: RHEL-32703 - Security fix for CVE-2024-3651 Resolves: RHEL-32703 - Drop Python 2 subpackage from RHEL 8, fixes RHBZ#1590399 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to version 2.5 - Update to version 2.4 - Resolves: rhbz#1427499 Update to 2.3 for IDNAError bugfix and memory improvement - Rebuild for Python 3.6 - Add patch to update setup.py to use setuptools and declare install dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Add platform-python package - Add bconds - Remove %{?system_python_abi} - Remove platform-python subpackage - Use better Obsoletes for platform-python - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Remove Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1567873 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Add entry point script - rebuilt - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - remove python2 subpackage - Only ship one executable (#1646714) - fix gating test - move tests to tmt framework - restore missing gating tests - 2131090 fix idbm patch to not overwrite upstream changes in file mode - 1755907 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning - coverity found a use-after-free regression in iscsistart - 1924768 fix unit files for el8, not using iscsi-init - 1924768 iscsiadm -m sessions fails when racing against session login/logout - 1849931, 1869438 go back to MD5 CHAP only by default new CHAP modes can cause issue with some targets, so SHA1/SHA256/SHA3-256 modes must be configured to enable now - 1801577 new service file not enabled on upgrade, spec change to use triggers for that - backport patch for RHEL-82415 iSCSI paths fail to get reinstated - fix gating test - move tests to tmt framework - restore missing gating tests - 2131090 fix idbm patch to not overwrite upstream changes in file mode - 1755907 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning - coverity found a use-after-free regression in iscsistart - 1924768 fix unit files for el8, not using iscsi-init - 1924768 iscsiadm -m sessions fails when racing against session login/logout - 1849931, 1869438 go back to MD5 CHAP only by default new CHAP modes can cause issue with some targets, so SHA1/SHA256/SHA3-256 modes must be configured to enable now - Modernize spec and make sure to provide python2-jwt - Update to 1.5.0. Fixes bug #1443792 - Update to 1.5.2. Fixes bug #1464286 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fixup spec file conditionals - Update to 1.5.3. Fixes bug #1488693 - 1.5.1 fixed CVE-2017-11424 Fixes bug #1482529 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Latest upstream - Add patch0 to remove pytest-{cov,runner} deps - Share doc and license dir between subpackages - Enable EPEL PY3 build - Drop python2 subpackage Resolves: rhbz#1567177 - Conditionalize the python2 subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Fix directory ownership - Python 2 binary package renamed to python2-kmod See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuild due to bug in RPM (RHBZ #1468476) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild for Python 3.6 - resolves: RHEL-16509 - Update to libldb-2.8.0 - resolves: rhbz#2190427 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190427 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190427 - Update to version 2.7.2 - resolves: rhbz#2132052 - Update to version 2.6.1 - resolves: rhbz#2108998 - Rebuild to include python3-ldb-devel in CRB - Rebase to version 2.5.2 - resolves: rhbz#2109016 - Fix CVE-2022-32746 - related: rhbz#2077484 - Rebase to version 2.5.1 - resolves: rhbz#2077484 - Rebase to version 2.5.0 - resolves: rhbz#2013605 - Rebase to version 2.4.1 - resolves: RHEL-12109 - Fix performance regression with indexes - resolves: RHEL-16509 - Update to libldb-2.8.0 - resolves: rhbz#2190427 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190427 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190427 - Update to version 2.7.2 - resolves: rhbz#2132052 - Update to version 2.6.1 - resolves: rhbz#2108998 - Rebuild to include python3-ldb-devel in CRB - Rebase to version 2.5.2 - resolves: rhbz#2109016 - Fix CVE-2022-32746 - related: rhbz#2077484 - Rebase to version 2.5.1 - resolves: rhbz#2077484 - Rebase to version 2.5.0 - Update to 0.1.18 - Fix issues detected by static analyzers - Remove Python 2 support - Backport patch: Don't print empty requires - Update to 0.1.16 - Make inline function __comps_objmrtree_all also static (RhBug:1793424) - Fix memory leaks and resource leaks - Fix: Check result "comps_parse_parsed_init()" - Use already implemented clear for COMPS_HSList (RhBug:1888343) - Do not skip type=mandatory in xml output (RhBug:1771224) - Fix segfault caused by empty dict created by *_by_lang in python api (RhBug:1757959) - Backport patch: Fix order of asserts in unit test (RhBug:1713220) - Update to 0.1.11 - Fix resource leaks, double free, unused code, optimize - Resolves: rhbz#1606974 - Disable Python 2 subpackage (and dependent) by default - Added patch for almalinux bugtracker - Added patch to support multiple keys - Set default SELinux labels on GnuPG directories (RHEL-6421) - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244) - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253) - Update translations - Support "proxy=_none_" in main config (RhBug:2155713) - Add repoid to solver error messages (RhBug:2179409,2179413) - Update translations - Allow change of arch during security updates with noarch (RhBug:2124483) - Fix listing a repository without cpeid (RhBug:2066334) - Add obsoletes to filtering for advisory candidates - Added patch for almalinux bugtracker - Added patch to support multiple keys - Do not set a default SELinux creation context if SELinux appears to be disabled (RHEL-43231) - Set default SELinux labels on GnuPG directories (RHEL-6421) - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244) - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253) - Update translations - Support "proxy=_none_" in main config (RhBug:2155713) - Add repoid to solver error messages (RhBug:2179409,2179413) - Update translations - Allow change of arch during security updates with noarch (RhBug:2124483) - Fix listing a repository without cpeid (RhBug:2066334) - Added patch for almalinux bugtracker - Added patch to support multiple keys - Fix calculating a difference between two same-version RPM transactions (RHEL-68770) - Do not set a default SELinux creation context if SELinux appears to be disabled (RHEL-43231) - Set default SELinux labels on GnuPG directories (RHEL-6421) - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244) - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253) - Update translations - Support "proxy=_none_" in main config (RhBug:2155713) - Add repoid to solver error messages (RhBug:2179409,2179413) - Update translations - Allow change of arch during security updates with noarch (RhBug:2124483) - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Update to 3.7.0 (rh #2078874) - Update to 3.5.0 - Fix issues found by coverity (rh #1606988) - Conditionalize the Python 2 subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Update to 3.4.0 - Update to 3.4.0-rc1 - Python 2 binary package renamed to python2-libnl3 See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Update to 0.4.13 - Update to 0.4.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.4.15 - Use pkgconfig for BuildRequires - Fix crash in pacrunner module (#1459779) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Drop python2 subpackage (#1559092) - Drop PAC runner based on the "pacrunner" package (#1569023) - Replace pacrunner-crash-fix patch with version from RHEL7 - Drop kde subpackage (#1538147) - Drop pacrunner-mozjs (#1571640) - Bump up version number - Fix PAC buffer overflow (#1869639) - Fix CVE-2020-25219 (#1880349) - Drop pacrunner-mozjs (#1571640) - Drop python2 subpackage (#1559092) - Drop PAC runner based on the "pacrunner" package (#1569023) - Replace pacrunner-crash-fix patch with version from RHEL7 - Drop kde subpackage (#1538147) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Use pkgconfig for BuildRequires - Fix crash in pacrunner module (#1459779) - Update to 0.4.15 - Set default SELinux labels on GnuPG directories (RHEL-10720) - Fix termination of va_list in lr_metadatatarget_append_error() - Detailed error message when using non-existing TMPDIR - Fix covscan issues - Use nanosec precision for timestamp of checksum cache - Update to 1.14.2 - Reduce time to load metadata - Fix resource leaks and memory leaks - Remove build dependency on python3-flask - Recover from fsync fail on read-only filesystem (RhBug:1956361) - Update to 1.14.0 - Fix the key string parsing in url_substitution - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706) - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383) - Fix: lr_perform() - Avoid 100% CPU usage - Add support for working with certificates used with proxy - Reposync does not re-download unchanged packages (RhBug:1931904) - Fix memory leaks - Add support for pkcs11 certificate and key for repository authorization (RhBug:1859495) - Validate paths read from repomd.xml (RhBug:1866505) - Update to 1.12.0 - Decode package URL when using for local filename (RhBug:1817130) - Fix memory leak in lr_download_metadata() and lr_yum_download_remote() - Download sources work when at least one of specified is working (RhBug:1775184) - Enable building on OSX - Add AlmaLinux to supported distros - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Security fix for CVE-2023-6597 Resolves: RHEL-33671 - Fix build with expat with fixed CVE-2023-52425 Related: RHEL-33671 - Security fix for CVE-2023-27043 Resolves: RHEL-20610 - Security fix for CVE-2022-48564 Resolves: RHEL-16674 - Skip tests failing on s390x Resolves: RHEL-19252 - Security fix for CVE-2022-48560 Resolves: RHEL-16707 - Security fix for CVE-2023-40217 Resolves: RHEL-3041 - Fix symlink handling in the fix for CVE-2007-4559 Resolves: rhbz#263261 - Bump release for rebuild Resolves: rhbz#2173917 - Add AlmaLinux to supported distros - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Security fix for CVE-2023-6597 Resolves: RHEL-33671 - Fix build with expat with fixed CVE-2023-52425 Related: RHEL-33671 - Security fix for CVE-2023-27043 Resolves: RHEL-20610 - Add AlmaLinux to supported distros - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Security fix for CVE-2023-6597 Resolves: RHEL-33671 - Add AlmaLinux to supported distros - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Add AlmaLinux to supported distros - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Add AlmaLinux to supported distros - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Add AlmaLinux to supported distros - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add AlmaLinux to supported distros - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Add AlmaLinux to supported distros - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Add AlmaLinux to supported distros - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Add AlmaLinux to supported distros - Security fix for CVE-2026-15308 Resolves: RHEL-193772 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Add AlmaLinux to supported distros - Security fix for CVE-2026-11940 Resolves: RHEL-227194 - Security fix for CVE-2026-15308 Resolves: RHEL-193772 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Add AlmaLinux to supported distros - Security fixes for CVE-2026-12345, CVE-2026-19445, CVE-2026-19553 Resolves: RHEL-272935, RHEL-276260, RHEL-274107 - Security fix for CVE-2026-11940 Resolves: RHEL-227194 - Security fix for CVE-2026-15308 Resolves: RHEL-193772 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Close old selabel handle when setting a new one (RHEL-73348) - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252) - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Ignore files removed during relabeling (RHEL-123885) - Close old selabel handle when setting a new one (RHEL-73348) - Fix NULL pointer use in selinux_restorecon_set_sehandle (RHEL-74252) - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK coverity scan defects - selinux_restorecon: Skip customized files also without -v - man pages fixes - restorecon: Include <selinux/label.h> (RHEL-50830) - restorecon: Fix memory leak - xattr_value (#2137965) - Restorecon: Ignore missing directories when -i is used (#2137965) - Describe fcontext regular expressions (#1904059) - Strip spaces before values in config (#2012145) - Deprecate security_compute_user(), update man pages (#1879368) - Eliminate use of security_compute_user() (#1879368) - Fix mcstrans secolor examples in secolor.conf man page (#1770270) - Use Python distutils to install SELinux python bindings (#1719771) - Move sefcontext_compile to -utils package (#1612518) - SELinux userspace 2.9 release - Fix RESOURCE_LEAK coverity scan defects - Preserve file context and ownership in policy store (RHEL-17509) - allow spaces in user/group names (#2042408) - always write kernel policy when check_ext_changes is specified (#2089802) - Bump release to get around OSCI issues - Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186) - sync filesystem with sandbox (#1913224) - Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786) - genhomedircon: check usepasswd (rhbz#1871786) - Fsync final files before rename (#1838762) - Add support for DCCP and SCTP protocols (#1563742) - SELinux userspace 2.9 release - Set new restorecon handle before doing restorecon (RHEL-73348) - Mute error messages from selinux_restorecon - Preserve file context and ownership in policy store (RHEL-17509) - allow spaces in user/group names (#2042408) - always write kernel policy when check_ext_changes is specified (#2089802) - Bump release to get around OSCI issues - Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186) - sync filesystem with sandbox (#1913224) - Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786) - genhomedircon: check usepasswd (rhbz#1871786) - Fsync final files before rename (#1838762) - Add support for DCCP and SCTP protocols (#1563742) - improve performance of semanage store rebuild (RHEL-86057) - Set new restorecon handle before doing restorecon (RHEL-73348) - Mute error messages from selinux_restorecon - Preserve file context and ownership in policy store (RHEL-17509) - allow spaces in user/group names (#2042408) - always write kernel policy when check_ext_changes is specified (#2089802) - Bump release to get around OSCI issues - Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186) - sync filesystem with sandbox (#1913224) - Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786) - genhomedircon: check usepasswd (rhbz#1871786) - Fsync final files before rename (#1838762) - always write kernel policy when check_ext_changes is specified (#2129139) - Bump release to get around OSCI issues - Trivial style fixes - Free contents of modkey in semanage_direct_remove - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext() - add missing include to boolean_record.c - move module hashing into libsemanage - move compressed file handling into a separate object - clean up semanage_direct_commit() a bit - optionally rebuild policy when modules are changed externally - add command-line option to detect module changes (#2049186) - sync filesystem with sandbox (#1913224) - Revert "genhomedircon: check usepasswd" (rhbz#1871786) - semanage.conf - improve usepasswd=False explanation (rhbz#1871786) - semanage.conf - expand list of ignoredirs (rhbz#1871786) - genhomedircon: check usepasswd (rhbz#1871786) - Fsync final files before rename (#1838762) - Add support for DCCP and SCTP protocols (#1563742) - SELinux userspace 2.9 release - genhomedircon - improve handling large groups - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Remove valgrind dependency as not being used and causing build to fail as it pulls in python3.11 - Fix subparsers - Add missing test yaml configuration file - RHEL-397 fips related corrections - Correct rpmdiff warnings - RHBZ #2018657 - Correct megaraid raid info (RHBZ #2018657) - Upgrade to 1.9.1 - Re-order dependencies - Correct multi-lib issue with python simulator files location - Upgrade to 1.9.0 (RHBZ #1939191) - Upgrade to 1.8.7 (RHBZ #1817117) - Man-page update - Resolves: rhbz#2070941 - small typo in lchage man page - Actually apply the patch from the previous build - Resolves: rhbz#1670997 - Amend the user lifecycle auditing - Resolves: rhbz#1670997 - Amend the user lifecycle auditing - Resolves: rhbz#1608321 - [libuser] RHEL 8.0 Tier 0 Localization - Resolves: rhbz#1637398 - libuser-python3 should be renamed to comply with Packaging Guidelines - Resolves: rhbz#1602600 - Please review important issues found by covscan in "libuser-0.62-14.el8+7" package - Resolves: rhbz#1608321 - [libuser] RHEL 8.0 Tier 0 Localization - Resolves: rhbz#1558151 - libuser needs audit events around the account lifecycle - Use 2048bit keys in tests - Resolves: rhbz#1611729 - [RHEL8-S-BUILD] libuser Fails Scratch Build on rhel-8.0 - Drop the fakeroot dependency - Resolves: #1581448 - Remove fakeroot from libuser in RHEL8 - fix findings from static application security testing (#RHEL-35578) - translation update (#RHEL-12111) - Man-page update - Resolves: rhbz#2070941 - small typo in lchage man page - Actually apply the patch from the previous build - Resolves: rhbz#1670997 - Amend the user lifecycle auditing - Resolves: rhbz#1670997 - Amend the user lifecycle auditing - Resolves: rhbz#1608321 - [libuser] RHEL 8.0 Tier 0 Localization - Resolves: rhbz#1637398 - libuser-python3 should be renamed to comply with Packaging Guidelines - Resolves: rhbz#1602600 - Please review important issues found by covscan in "libuser-0.62-14.el8+7" package - Resolves: rhbz#1608321 - [libuser] RHEL 8.0 Tier 0 Localization - Resolves: rhbz#1558151 - libuser needs audit events around the account lifecycle - Use 2048bit keys in tests - Resolves: rhbz#1611729 - [RHEL8-S-BUILD] libuser Fails Scratch Build on rhel-8.0 - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2022-29824 (#2082298) - Bump release (#2057664) - Fix CVE-2022-23308 (#2057664) - Fix CVE-2021-3541 (#1958783) - Fix CVE-2021-3516 (#1956976) - Fix CVE-2021-3517 (#1957001) - Fix CVE-2021-3518 (#1957028) - Fix CVE-2021-3537 (#1957284) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2022-29824 (#2082298) - Bump release (#2057664) - Fix CVE-2022-23308 (#2057664) - Fix CVE-2021-3541 (#1958783) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2022-29824 (#2082298) - Bump release (#2057664) - Fix CVE-2022-23308 (#2057664) - Fix CVE-2021-3541 (#1958783) - Fix CVE-2021-3516 (#1956976) - Fix CVE-2021-3517 (#1957001) - Fix CVE-2021-3518 (#1957028) - Fix CVE-2021-3537 (#1957284) - Fix CVE-2020-24977 (#1878252) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2022-29824 (#2082298) - Bump release (#2057664) - Fix CVE-2022-23308 (#2057664) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2022-29824 (#2082298) - Bump release (#2057664) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2016-3709 (#2120781) - Fix CVE-2026-86144 (RHEL-269184) - Fix CVE-2026-86144 (RHEL-256306) - Fix CVE-2026-86140 (RHEL-256021) - Fix CVE-2026-74860 (RHEL-255956) - Fix CVE-2026-86143 (RHEL-256895) - Fix CVE-2026-86138 (RHEL-256950) - Lower xpath recursion limits (RHEL-249282) - Fix CVE-2026-6653 (RHEL-215616) - Fix CVE-2026-11979 (RHEL-215569) - Fix CVE-2025-6170 (RHEL-182012) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2022-40303 (#2136563) - Fix CVE-2022-40304 (#2136568) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2023-28484 (#2186692) - Fix CVE-2023-29469 (#2186692) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2023-39615 (RHEL-5179) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2024-25062 (RHEL-31056) - Fix CVE-2025-6170 (RHEL-182012) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Fix CVE-2022-49043 (RHEL-76289) - Fix CVE-2026-11979 (RHEL-215569) - Fix CVE-2025-6170 (RHEL-182012) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2025-32414 (RHEL-88198) - Fix CVE-2024-56171 (RHEL-80122) - Fix CVE-2025-24928 (RHEL-80137) - Lower xpath recursion limits (RHEL-249282) - Fix CVE-2026-6653 (RHEL-215616) - Fix CVE-2026-11979 (RHEL-215569) - Fix CVE-2025-6170 (RHEL-182012) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Fix integer overflow (RHEL-74345) - Fix CVE-2026-86144 (RHEL-256306) - Fix CVE-2026-86140 (RHEL-256021) - Fix CVE-2026-74860 (RHEL-255956) - Fix CVE-2026-86143 (RHEL-256895) - Fix CVE-2026-86138 (RHEL-256950) - Lower xpath recursion limits (RHEL-249282) - Fix CVE-2026-6653 (RHEL-215616) - Fix CVE-2026-11979 (RHEL-215569) - Fix CVE-2025-6170 (RHEL-182012) - Fix CVE-2024-34459 (RHEL-36405) - Fix CVE-2025-9714 (RHEL-119279) - Fix CVE-2025-32415 (RHEL-100177) - Fix CVE-2025-7425 (RHEL-102797) - Fix CVE-2025-6021 (RHEL-96498) - Fix CVE-2025-49794 (RHEL-96398) - Fix CVE-2025-49796 (RHEL-96424) - Rebase to upstream python-linux-procfs-0.7.3 - This rebase removes upstream spec files and - syncs the git tag with version Resolves: RHEL-9195 Rebase to python-linux-procfs - 0.7.2 Resolves: RHEL-8987 - Rebase to upstream version python-linux-procfs-0.7.1 Resolves: rhbz#2121522 - Rebase to upstream version python-linux-procfs-0.7.0 Resolves: rhbz#2031158 - various clean-ups including using 'with' context managers in try-except - Fix to ignore UnicodeDecodeError when it occurs Resolves: rhbz#2016204 - Propagate error to user if pid completed - Handle pid completed in pflags Resolves: rhbz#1820709 - Fix traceback with non-utf8 chars Resolves: rhbz#2016204 - Rebase to latest upstream - Correct URL and Source - Simplify specfile Resolves: rhbz#1890557 Resolves: rhbz#1850391 - Add bitmasklist_test - Clean-ups including using a more modern python spacing, tabbing, etc - Fix to parse number of cpus correctly on s390(x) Resolves: rhbz#1849215 - Fix segfault in python3-file-magic concurrent method calls (#13737) - Improve thermocam magic (rhbz#2158115) - fix detection of static-pie binaries (#2071581) - fix detection of static-pie binaries (#2071581) - fix issue with libmagic and floating point exceptions (#2061557) - fix recognition (src/compress.c) of compressed empty files (#2095828) - rebuild (#1954434) - fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218) - improve magic for script recognition and other changes (#1903531) - magic/Magdir/msooxml: Search deeper in the zip file (#1845169) - Fix incorrect magic pattern for databases Resolves: RHEL-84532 - Fix segfault in python3-file-magic concurrent method calls (#13737) - Improve thermocam magic (rhbz#2158115) - fix detection of static-pie binaries (#2071581) - fix detection of static-pie binaries (#2071581) - fix issue with libmagic and floating point exceptions (#2061557) - fix recognition (src/compress.c) of compressed empty files (#2095828) - rebuild (#1954434) - fix heap-based buffer overflow in cdf_read_property_info() (CVE-2019-18218) - improve magic for script recognition and other changes (#1903531) - Update to 2.6.7. - Update Source0 URL. - Rebuild for Python 3.6 - Update to 2.6.8. - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 2.6.9. - Allow building a python3 subpackage on EPEL7+. - Fix BRs. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to 2.6.11. - Conditionalize the python2 subpackage - parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-2596] - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL] - rule: check address family in set collapse (Phil Sutter) [RHEL-5160] - Add expected error records for testsuite runs (Phil Sutter) [2211076] - tests: monitor: Summarize failures per test case (Phil Sutter) [2211076] - Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076] - Rebase onto version 1.0.4 (Phil Sutter) [2211076] - libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287] - src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287] - src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287] - rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287] - rule: memleak in __do_add_setelems() (Phil Sutter) [2073287] - tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924] - mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924] - mnl: do not build nftnl_set element list (Phil Sutter) [2047821] - tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773] - evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773] - evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594] - src: support for restoring element counters (Phil Sutter) [2039594] - netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594] - tests: shell: better parameters for the interval stack overflow test (Phil Sutter) [1908127] - tests: shell: $NFT needs to be invoked unquoted (Phil Sutter) [1908127] - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set") (Phil Sutter) [1908127] - segtree: Fix segfault when restoring a huge interval set (Phil Sutter) [1908127] - json: Drop pointless assignment in exthdr_expr_json() (Phil Sutter) [1999059] - parser_json: Fix for memleak in tcp option error path (Phil Sutter) [1999059] - parser_bison: Fix for implicit declaration of isalnum (Phil Sutter) [1999059] - parser_json: Fix error reporting for invalid syntax (Phil Sutter) [1994141] - tests: shell: Fix bogus testsuite failure with 100Hz (Phil Sutter) [1919203] - doc: nft.8: Extend monitor description by trace (Phil Sutter) [1820365] - include: missing sctp_chunk.h in Makefile.am (Phil Sutter) [1979334] - exthdr: Implement SCTP Chunk matching (Phil Sutter) [1979334] - scanner: sctp: Move to own scope (Phil Sutter) [1979334] - scanner: introduce start condition stack (Phil Sutter) [1979334] - json: Simplify non-tcpopt exthdr printing a bit (Phil Sutter) [1979334] - json: tcp: add raw tcp option match support (Phil Sutter) [1979334] - tcp: add raw tcp option match support (Phil Sutter) [1979334] - tcpopt: allow to check for presence of any tcp option (Phil Sutter) [1979334] - tcpopt: split tcpopt_hdr_fields into per-option enum (Phil Sutter) [1979334] - tcpopt: rename noop to nop (Phil Sutter) [1979334] - tcpopts: clean up parser -> tcpopt.c plumbing (Phil Sutter) [1979334] - parser: merge sack-perm/sack-permitted and maxseg/mss (Phil Sutter) [1979334] - tests/py: Move tcpopt.t to any/ directory (Phil Sutter) [1979334] - xt: Fix translation error path (Phil Sutter) [RHEL-5806] - evaluate: un-break rule insert with intervals (Phil Sutter) [RHEL-62895] - xt: Fix fallback printing for extensions matching keywords (Phil Sutter) [RHEL-5806] - xt: Fall back to generic printing from translation (Phil Sutter) [RHEL-5806] - xt: Rewrite unsupported compat expression dumping (Phil Sutter) [RHEL-5806] - xt: Purify enum nft_xt_type (Phil Sutter) [RHEL-5806] - xt: Delay libxtables access until translation (Phil Sutter) [RHEL-5806] - Warn for tables with compat expressions in rules (Phil Sutter) [RHEL-5806] - parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-2596] - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL] - rule: check address family in set collapse (Phil Sutter) [RHEL-5160] - Add expected error records for testsuite runs (Phil Sutter) [2211076] - tests: monitor: Summarize failures per test case (Phil Sutter) [2211076] - Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076] - Rebase onto version 1.0.4 (Phil Sutter) [2211076] - libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287] - src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287] - src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287] - rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287] - rule: memleak in __do_add_setelems() (Phil Sutter) [2073287] - tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924] - mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924] - mnl: do not build nftnl_set element list (Phil Sutter) [2047821] - tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773] - evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773] - evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594] - src: support for restoring element counters (Phil Sutter) [2039594] - netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594] - tests: shell: better parameters for the interval stack overflow test (Phil Sutter) [1908127] - tests: shell: $NFT needs to be invoked unquoted (Phil Sutter) [1908127] - Tree-wide use of python3 (Phil Sutter) [RHEL-179874] - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-179874] - src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-179599] - expression: cleanup expr_ops_by_type() and handle u32 input (Phil Sutter) [RHEL-179599] - netlink: handle invalid etype in set_make_key() (Phil Sutter) [RHEL-179599] - xt: Fix translation error path (Phil Sutter) [RHEL-5806] - evaluate: un-break rule insert with intervals (Phil Sutter) [RHEL-62895] - xt: Fix fallback printing for extensions matching keywords (Phil Sutter) [RHEL-5806] - xt: Fall back to generic printing from translation (Phil Sutter) [RHEL-5806] - xt: Rewrite unsupported compat expression dumping (Phil Sutter) [RHEL-5806] - xt: Purify enum nft_xt_type (Phil Sutter) [RHEL-5806] - xt: Delay libxtables access until translation (Phil Sutter) [RHEL-5806] - Warn for tables with compat expressions in rules (Phil Sutter) [RHEL-5806] - parser_bison: Fix for broken compatibility with older dumps (Phil Sutter) [RHEL-2596] - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL] - rule: check address family in set collapse (Phil Sutter) [RHEL-5160] - Add expected error records for testsuite runs (Phil Sutter) [2211076] - tests: monitor: Summarize failures per test case (Phil Sutter) [2211076] - Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076] - Rebase onto version 1.0.4 (Phil Sutter) [2211076] - libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287] - src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287] - src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287] - rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287] - rule: memleak in __do_add_setelems() (Phil Sutter) [2073287] - tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924] - mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924] - mnl: do not build nftnl_set element list (Phil Sutter) [2047821] - tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773] - evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773] - evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594] - src: support for restoring element counters (Phil Sutter) [2039594] - netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594] - Upgrade to upstream 2.0.1 - port from jwt to jwcrypto (conditional build) - bring into alignment with rhel spec file - add spaces around the >= for Requires - fix dependency on python2-jwt, should be python-jwt - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Cleanup spec file conditionals - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Conditionalize the python2 subpackage - Unify spec file between Fedora and RHEL - Restore use of bcond for python conditionals - upgrade to latest upstream 2.1.0 - Resolves: rhbz#1612380 - Resolve issues found by rpmdiff - add explicit Requires: on subpackages to avoid the need to test interoperability between the various combinations of old and new subpackages - add code to restore binary compatibility in libIPMIlanserv.so and libOpenIPMIcmdlang.so broken in 2.0.31, while keeping compatibility with 2.0.31 as well. - fix collectd-ipmi crash (#1990072) - New upstream release 2.0.31 (#1923044) - New upstream release 2.0.29 (#1796588) - New upstream release 2.0.27 - Rebuild for Net-SNMP - Rebuild with fixed binutils - Rebuilt for gdbm - New upstream release 2.0.25 (#1568194) - Replace Python2 with Python3 - Drop OpenIPMI-python2 and set it as Obsolete - Introduce new OpenIPMI-python3 package - use ldconfig macros - remove old systemd dependencies - use autosetup - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322} - atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459} - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415} - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415} - usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760} - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024} - vfs: use READ_ONCE() to access ->i_link (Jay Shin) [RHEL-141790] - fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790] - fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271} - Backport 'create an empty changelog file when changing its name' (Alexandra Hájková) - mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258} - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443] - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403} - sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625] - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685] - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134} - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709] - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693] - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442] - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248} - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074} - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129} - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800} - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064} - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334] - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762} - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304} - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505] - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168} - Revert "audit: Avoid excessive dput/dget in audit_context setup and reset paths" (Alexandra Hájková) [RHEL-145856] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097} - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235] - smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235] - cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235] - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235] - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235] - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235] - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235] - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235] - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235] - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235] - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235] - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673} - smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235] - smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235] - smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235] - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235] - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235] - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235] - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235] - smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235] - smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235] - smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235] - smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869} - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822} - cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235] - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235] - smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235] - smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235] - smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235] - smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235] - smb: client: fix null auth (Paulo Alcantara) [RHEL-138235] - smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235] - cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235] - smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076} - fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235] - smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235] - smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235] - smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235] - smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235] - smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235] - cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235] - cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235] - cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235] - cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235] - cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235] - cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235] - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235] - cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235] - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246} - smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235] - cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235] - cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235] - cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052} - cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235] - cifs: remove unused function (Paulo Alcantara) [RHEL-138235] - cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235] - cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235] - cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235] - cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235] - cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235] - cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235] - cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235] - cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235] - cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235] - cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235] - cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235] - cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235] - cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235] - cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235] - cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235] - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479] - x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479] - x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479] - x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479] - x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479] - x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479] - x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479] - x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479] - x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479] - x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479] - x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479] - x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479] - x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479] - macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922] - fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636] - audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026] - fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026] - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288] - scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288] - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288] - scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288] - scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288] - scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288] - scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288] - scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288] - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288] - scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288] - scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288] - crypto: authencesn - reject too-short AAD (assoclen<8) - crypto: scatterwalk - Backport memcpy_sglist() - crypto: algif_aead - use memcpy_sglist() instead of null skcipher - crypto: algif_aead - Revert to operating out-of-place - crypto: algif_aead - snapshot IV for async AEAD requests - crypto: authenc - use memcpy_sglist() instead of null skcipher - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption - crypto: authencesn - Fix src offset when decrypting in-place - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl - crypto: algif_aead - Fix minimum RX size check for decryption - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398] - tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187] - xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464] - xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523] - tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221] - macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209} - x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016] - s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946] - s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123] - gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614] - gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614] - gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614] - gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614] - gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614] - gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614] - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] - xfrm: esp: avoid in-place decrypt on shared skb frags - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} - ptrace: require CAP_SYS_PTRACE when task has no mm (kABI-safe) - net: skbuff: propagate shared-frag marker through frag-transfer helpers - net: skbuff: propagate shared-frag marker through pskb_copy() - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191} - ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532] - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532] - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532] - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417] - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307] - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538] - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236] - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236] - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236] - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236] - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236] - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236] - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236] - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236] - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131} - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236] - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402} - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075] - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075] - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075] - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657] - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187] - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401} - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724} - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252} - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - crypto: af_alg - Work around empty control messages without MSG_MORE (Thomas Huth) [RHEL-175772] - crypto: af_alg - Fix regression on empty requests (Thomas Huth) [RHEL-175772] - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() (Thomas Huth) [RHEL-175772] - crypto: af_alg - remove redundant initializations of sk_family (Thomas Huth) [RHEL-175772] - crypto: af_alg - Use bh_lock_sock in sk_destruct (Thomas Huth) [RHEL-175772] - crypto: algif_aead - fix uninitialized ctx->init (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Only wake up when ctx->more is zero (Thomas Huth) [RHEL-175772] - crypto: algif_aead - Do not set MAY_BACKLOG on the async path (Thomas Huth) [RHEL-175772] - crypto: null - Remove VLA usage of skcipher (Thomas Huth) [RHEL-175772] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172815] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172815] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172815] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172815] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172815] {CVE-2026-31709} - smb: client: Return a status code only as a constant in sid_to_id() (Paulo Alcantara) [RHEL-172815] - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-172815] - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-172815] - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-172815] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174212] {CVE-2026-43190} - md/bitmap: fix GPF in write_page caused by resize race (CKI Backport Bot) [RHEL-174088] {CVE-2026-43163} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174045] {CVE-2026-43158} - can: raw: fix ro->uniq use-after-free in raw_rcv() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - can: af_can: export can_sock_destruct() (Davide Caratti) [RHEL-170753] {CVE-2026-31532} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172734] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172614] {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172566] {CVE-2026-43020} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: SCO: Fix UAF on sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Init sk_peer_* on bt_sock_alloc (David Marlin) [RHEL-165057] {CVE-2026-31408} - Bluetooth: Consolidate code around sk_alloc into a helper function (David Marlin) [RHEL-165057] {CVE-2026-31408} - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171149] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171132] {CVE-2026-31684} - smb: client: fix mid_q_entry memleak leak with per-mid locking (Paulo Alcantara) [RHEL-164032] - smb: client: smb: client: eliminate mid_flags field (Paulo Alcantara) [RHEL-164032] - smb: client: add mid_counter_lock to protect the mid counter counter (Paulo Alcantara) [RHEL-164032] - smb: client: rename server mid_lock to mid_queue_lock (Paulo Alcantara) [RHEL-164032] - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-164032] - smb: client: remove redundant lstrp update in negotiate protocol (Paulo Alcantara) [RHEL-164032] - smb: client: fix race condition in negotiate timeout by using more precise timing (Paulo Alcantara) [RHEL-164032] - smb: client: fix first command failure during re-negotiation (Paulo Alcantara) [RHEL-164032] - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-164032] - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-166886] {CVE-2025-68183} - selftests/bpf: Test outer map update operations in syscall program (Viktor Malik) [RHEL-152219] - selftests/bpf: Add test cases for inner map (Viktor Malik) [RHEL-152219] - bpf: prepare for more bpf syscall to be used from kernel and user space. (Viktor Malik) [RHEL-152219] - bpf: Optimize the free of inner map (Viktor Malik) [RHEL-152219] - bpf: Defer the free of inner map when necessary (Viktor Malik) [RHEL-152219] - bpf: Set need_defer as false when clearing fd array during map free (Viktor Malik) [RHEL-152219] - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Viktor Malik) [RHEL-152219] - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Viktor Malik) [RHEL-152219] - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166981] {CVE-2026-23455} - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CKI Backport Bot) [RHEL-166960] {CVE-2025-68347} - RDMA/umad: Reject negative data_len in ib_umad_write (Kamal Heib) [RHEL-156872] {CVE-2026-23243} - Bluetooth: mgmt: remove NULL check in add_ext_adv_params_complete() (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: ISO: don't try to remove CIG if there are bound CIS left (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_event: Fix Invalid wait context (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect (David Marlin) [RHEL-122890] - Bluetooth: Fix HCIGETDEVINFO regression (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Fix hci_read_buffer_size_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: fix double mgmt_pending_free() in remove_adv_monitor() (David Marlin) [RHEL-122890] - Bluetooth: hci_conn: Fix updating ISO QoS PHY (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible UAFs (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (David Marlin) [RHEL-122890] - Bluetooth: Fix race condition in hci_cmd_sync_clear (David Marlin) [RHEL-122890] - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix sparse errors (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (David Marlin) [RHEL-122890] - Bluetooth: Add initial implementation of CIS connections (David Marlin) [RHEL-122890] - Bluetooth: hci_core: Fix possible buffer overflow (David Marlin) [RHEL-122890] - Bluetooth: Keep MGMT pending queue ordered FIFO (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (David Marlin) [RHEL-122890] - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (David Marlin) [RHEL-122890] - Bluetooth: MGMT: Fix possible deadlocks (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: remove NULL check in mgmt_set_connectable_complete() (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor remove Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: hci_sync: Refactor add Adv Monitor (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Move code snippet to correct location (David Marlin) [RHEL-122890] - Bluetooth: msft: Clear tracked devices on resume (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: mgmt: Add MGMT Adv Monitor Device Found/Lost events (David Marlin) [RHEL-122890] {CVE-2025-39981} - Bluetooth: msft: Handle MSFT Monitor Device Event (David Marlin) [RHEL-122890] {CVE-2025-39981} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157322] {CVE-2026-23270} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142093] {CVE-2025-71116} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613} - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961] - geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858} - netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392} - smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781} - nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179982] {CVE-2026-46181} - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-178447] - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172664] {CVE-2026-43038} - ALSA: 6fire: Fix leftover global pointers after probe failures (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: Cover the whole probe and disconnect calls with register_mutex (Jaroslav Kysela) [RHEL-172963] - ALSA: 6fire: fix use-after-free on disconnect (Jaroslav Kysela) [RHEL-172963] {CVE-2026-31581} - ALSA: 6fire: Release resources at card release (Jaroslav Kysela) [RHEL-172963] {CVE-2024-53239} - RDMA/rxe: Fix double free in rxe_srq_from_init (Kamal Heib) [RHEL-179702] {CVE-2026-45852} - md: uninitialized start_time in md_clone_bio() causes bogus IO accounting (Nigel Croxon) [RHEL-170384] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172640] {CVE-2026-43037} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173986] {CVE-2026-43125} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Buffer overflow in drivers/xen/sys-hypervisor.c (CKI Backport Bot) [RHEL-172504] {CVE-2026-31786} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - wifi: mac80211: remove station if connection prep fails (Jose Ignacio Tornos Martinez) [RHEL-180120] {CVE-2026-46125} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180058] {CVE-2026-46152} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179360] {CVE-2026-46056} - netfilter: flowtable: strictly check for maximum number of actions (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - netfilter: nf_tables_offload: add nft_flow_action_entry_next() and use it (Florian Westphal) [RHEL-176909] {CVE-2026-43329} - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171500] {CVE-2026-31669} - xen/privcmd: fix double free via VMA splitting (Vitaly Kuznetsov) [RHEL-172482] {CVE-2026-31787} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173853] {CVE-2026-43110} - Re-add AlmaLinux ahead-of-RHEL security fixes dropped by the 553.141.1 re-import: KVM x86 shadow-paging use-after-free CVE-2026-46113 (1100-1101), and rtmutex self-deadlock NULL deref in remove_waiter() upstream 3bfdc63936dd + 40a25d59e85b (1102, 1104) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (José Expósito) [RHEL-178825] {CVE-2026-31488} - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520] - RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145} - ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279} - net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435] - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435] - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435] - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435] - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435] - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435] - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179435] - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435] - ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113} - KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618] - KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618] - KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341] - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066} - iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089} - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411} - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188327] {CVE-2026-53071} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938] - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] - KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} - KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] - KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] - KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] - KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] - serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} - xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] - selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] - selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] - mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] - mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213300] {CVE-2026-64530} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173877] {CVE-2026-43116} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - net: dns_resolver: allow shorter names in dns_query() (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: use kasprintf + kmemdup_nul to simplify dns_query (Paulo Alcantara) [RHEL-213976] - net/dns_resolver: consolidate namelen checks in dns_query (Paulo Alcantara) [RHEL-213976] - dns: remove redundant zero length namelen check (Paulo Alcantara) [RHEL-213976] - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188216] {CVE-2026-52923} - KVM: s390: Limit adapter indicator access to mapped page (Christoph Schlameuss) [RHEL-183880] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099] - bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469} - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623} - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471} - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581] - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707} - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117] - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852} - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773} - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704} - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389] - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389] - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389] - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389] - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389] - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389] - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389] - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945} - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010} - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784} - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020} - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770] - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929} - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910} - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831] - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905} - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831] - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952} - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341] - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341] - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341] - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121] - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-42121] - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121] - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121] - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121] - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121] - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121] - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121] - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121] - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121] - x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121] - Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121] - KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121] - x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121] - x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121] - x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121] - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921} - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784] - ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927} - perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876] - perf tools: Fix spelling mistake "commpressor" -> "compressor" (Michael Petlan) [RHEL-34876] - perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876] - perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876] - perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876] - perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876] - perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876] - perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876] - perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876] - perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876] - tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876] - perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876] - gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901] - gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901] - gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "Add quota_change type" (Andreas Gruenbacher) [RHEL-40901] - gfs2: Revert "ignore negated quota changes" (Andreas Gruenbacher) [RHEL-40901] - gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901] - gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901] - gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901] - gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901] - gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901] - gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901] - gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901] - gfs2: simplify slot_get (Bob Peterson) [RHEL-40901] - gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901] - gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901] - gfs2: use constant for array size (Bob Peterson) [RHEL-40901] - gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901] - gfs2: Remove useless err set (Bob Peterson) [RHEL-40901] - gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901] - gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901] - gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901] - gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901] - gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901] - gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901] - gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901] - gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901] - gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901] - gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901] - gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901] - gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901] - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901] - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data-races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - af_unix: Fix data races around sk->sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596} - perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798] - media: bttv: fix use after free error due to btv->timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847} - arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733} - Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263] - mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960} - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743} - ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579} - net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056] - net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276} - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621} - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586} - inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921} - skb_expand_head() adjust skb->truesize incorrectly (Antoine Tenart) [RHEL-33398] - nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547] - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025} - tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640} - SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388} - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941} - nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870} - drm/amd/pm: Fix error of MACO flag setting code (Michel Dänzer) [RHEL-15928] - scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913] - block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925} - block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917} - virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762} - nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025} - isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284} - isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468} - net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775} - ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739} - i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791} - i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791} - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950} - ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614} - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006} - pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756} - mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730} - of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679} - of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679} - pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940} - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764} - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954} - cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222] - cifs: Fix use-after-free in rdata->read_into_pages() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222] - cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222] - cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222] - cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222] - Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222] - cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222] - cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222] - smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222] - cifs: fix missing spinlock around update to ses->status (Paulo Alcantara) [RHEL-36222] - cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222] - cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222] - cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222] - cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222] - cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222] - cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222] - cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222] - smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222] - cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222] - mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222] - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832} - wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777} - net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257} - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000} - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908} - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937} - wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946} - atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834} - wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938} - wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912} - USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930} - netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005} - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434} - misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824} - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876} - net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669} - SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653} - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463} - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823} - quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878} - locking/lockdep: Fix overflow in presentation of average lock-time (Čestmír Kalina) [RHEL-17678] - blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939] - proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167] - stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802} - powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451} - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864} - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Kamal Heib) [RHEL-36908] {CVE-2023-52658} - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074] - hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074] - hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074] - hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074] - hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074] - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074] - hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074] - hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074] - hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074] - net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074] - gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "Make glock lru list scanning safer" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Fix "ignore unlock failures after withdraw" (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941] - gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941] - gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941] - gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941] - ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807} - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974] - ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622} - ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507] - ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507] - ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507] - tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939} - net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845} - redhat: remove the merge subtrees script (Derek Barbosa) - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa) - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa) - dyndbg: fix old BUG_ON in >control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947} - dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111] - dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111] - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437] - net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437] - efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843} - perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841] - perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841] - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Michael Petlan) [RHEL-23841] - drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841] - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801} - watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723] - tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886} - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - iio: event: Fix event FIFO reset race (CKI Backport Bot) [RHEL-223364] {CVE-2026-64496} - redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky) - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270] - scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191} - scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276} - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913} - netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189} - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400] - sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400] - sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400] - usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924} - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563} - net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480} - nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493} - smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343} - netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007} - netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015} - ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113} - xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117] - tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801} - tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} - sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315} - sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376} - sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300} - gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340] - gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340] - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246} - netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942} - netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986} - scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745} - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - EDAC/bluefield: Fix potential integer overflow (Joel Savitz) [RHEL-234337] {CVE-2024-53161} - scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (CKI Backport Bot) [RHEL-254583] {CVE-2026-74556} - blk-cgroup: fix UAF in __blkcg_rstat_flush() (Jeff Moyer) [RHEL-230276] {CVE-2026-63802} - dm-verity: fix buffer overflow in FEC calculation (Benjamin Marzinski) [RHEL-244942] {CVE-2026-72098} - net: qrtr: restrict socket creation to the initial network namespace (Jose Ignacio Tornos Martinez) [RHEL-239090] {CVE-2026-68294} - wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request (Jose Ignacio Tornos Martinez) [RHEL-237990] {CVE-2026-68363} - wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-231677] {CVE-2026-64117} - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-230705] {CVE-2025-71127} - wifi: nl80211: reject oversized EMA RNR lists (Jose Ignacio Tornos Martinez) [RHEL-230593] {CVE-2026-53182} - net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove (Jose Ignacio Tornos Martinez) [RHEL-229715] {CVE-2026-52947} - scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 (CKI Backport Bot) [RHEL-228708] {CVE-2026-63889} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CKI Backport Bot) [RHEL-189455] {CVE-2026-43133} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298} - ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228} - ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103} - xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663} - xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919} - xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426} - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239} - ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917} - ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266} - ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002} - ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075} - ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275} - net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223} - flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306} - ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339} - net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143} - slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390] - slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390] - netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233} - ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192} - netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920} - netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268} - IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: remove nvmet_tcp_finish_cmd (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: fix NULL pointer dereference during release (Chris Leech) [RHEL-260522] {CVE-2026-64534} - nvmet-tcp: don't map pages which can't come from HIGHMEM (CKI Backport Bot) [RHEL-260522] {CVE-2026-64534} - xfs: do not allocate the entire delalloc extent in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: fix xfs_bmap_add_extent_delay_real for partial conversions (Lukas Herbolt) [RHEL-251578] - xfs: remove the xfs_iext_peek_prev_extent call in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: pass the actual offset and len to allocate to xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: don't open code XFS_FILBLKS_MIN in xfs_bmapi_write (Lukas Herbolt) [RHEL-251578] - xfs: lift a xfs_valid_startblock into xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - xfs: remove the unusued tmp_logflags variable in xfs_bmapi_allocate (Lukas Herbolt) [RHEL-251578] - keys: Pin request_key_auth payload in instantiate paths (Bruno Meneguele) [RHEL-225491] {CVE-2026-63823} - iommu/vt-d: Remove unnecessary locking in intel_irq_remapping_alloc() (Jakub Brnak) [RHEL-243217] - iommu/vt-d: Clear Present bit before tearing down PASID entry (Eder Zulian) [RHEL-228475] {CVE-2026-45894} - iommu/amd: Fix clone_alias() to use the original device's devid (Eder Zulian) [RHEL-227450] {CVE-2026-53053} - Bluetooth: RFCOMM: Fix session UAF in set_termios (CKI Backport Bot) [RHEL-237326] {CVE-2026-68188} - net/mlx5: Fix MCIA register buffer overflow on 32 dword reads (CKI Backport Bot) [RHEL-236787] {CVE-2026-68293} - RDMA/rxe: Fix a use-after-free problem in rxe_mmap (Kamal Heib) [RHEL-233821] {CVE-2026-64582} - RDMA/rxe: Reject unknown opcodes before ICRC processing (Kamal Heib) [RHEL-226871] {CVE-2026-46133} - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (Kamal Heib) [RHEL-228181] {CVE-2026-46043} - dm cache policy smq: check allocation under invalidate lock (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - dm cache policy smq: fix missing locks in invalidating cache blocks (CKI Backport Bot) [RHEL-231810] {CVE-2026-53062} - Bluetooth: HIDP: fix missing length checks in hidp_input_report() (CKI Backport Bot) [RHEL-231060] {CVE-2026-63947} - Bluetooth: L2CAP: Fix potential user-after-free (CKI Backport Bot) [RHEL-229428] {CVE-2023-54214} - Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (CKI Backport Bot) [RHEL-228747] {CVE-2026-63975} - Bluetooth: SMP: force responder MITM requirements before building the pairing response (CKI Backport Bot) [RHEL-227528] {CVE-2026-43334} - Bluetooth: Fix race condition in hidp_session_thread (CKI Backport Bot) [RHEL-227382] {CVE-2023-54120} - Bluetooth: RFCOMM: validate skb length in MCC handlers (CKI Backport Bot) [RHEL-225633] {CVE-2026-53254} - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (CKI Backport Bot) [RHEL-225571] {CVE-2026-53256} - Bluetooth: serialize accept_q access (CKI Backport Bot) [RHEL-225535] {CVE-2026-52918} - Bluetooth: btusb: revert use of devm_kzalloc in btusb (CKI Backport Bot) [RHEL-225154] {CVE-2025-71082} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (CKI Backport Bot) [RHEL-264205] {CVE-2025-39964} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - pppoe: reload header pointer after dev_hard_header() (Guillaume Nault) [RHEL-237293] {CVE-2026-68121} - nvme-tcp: reject a read that transferred too few bytes (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - nvme: rename and document nvme_end_request (CKI Backport Bot) [RHEL-263345] {CVE-2026-89480} - ipvs: do not propagate one-packet flag to synced conns (CKI Backport Bot) [RHEL-255839] {CVE-2026-80714} - netfilter: nf_queue: hold bridge skb->dev while queued (CKI Backport Bot) [RHEL-231233] {CVE-2026-52912} - drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib (CKI Backport Bot) [RHEL-221269] {CVE-2026-31566} - net: tun: bound receive headroom (CKI Backport Bot) [RHEL-264385] {CVE-2026-81000} - xfrm: ah6: validate routing header segments_left (CKI Backport Bot) [RHEL-264314] {CVE-2026-80844} - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CKI Backport Bot) [RHEL-262571] {CVE-2026-89846} - ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CKI Backport Bot) [RHEL-243620] {CVE-2026-72261} - mac802154: llsec: add skb_cow_data() before in-place crypto (Abhishek Rawal) [RHEL-231030] {CVE-2026-63831} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234282] {CVE-2026-64564} - drm/amdgpu: Fix use-after-free race in VM acquire (CKI Backport Bot) [RHEL-222381] {CVE-2026-43370} - sctp: prevent peer transport count overflow (Xin Long) [RHEL-216297] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034} - arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875} - perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753} - perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556} - drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273} - drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710] - drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309] - drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230} - drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430] - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199} - drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204} - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024] - fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323} - libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - libceph: Amend checking to fix `make W=1` build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159} - ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942} - libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155} - libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156} - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - netfilter: nfnetlink_queue: unbreak SCTP traffic - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777} - ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202} - inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590} - ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572} - ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114} - xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536} - fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266} - smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631} - netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320} - perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195} - USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196} - gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363] - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363] - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363] - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363] - gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363] - gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename "gfs_recovery" workqueue to "gfs2_recovery" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363] - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363] - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363] - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363] - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-129363] - gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-129363] - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363] - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-129363] - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363] - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363] - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363] - gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363] - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363] - gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363] - gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363] - gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363] - gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363] - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363] - gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363] - gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363] - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760} - gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363] - gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363] - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363] - gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363] - gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363] - gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363] - strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732] - xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684] - xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684] - xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684] - netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288} - sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752} - sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479} - sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588} - xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935} - powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146] - md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262} - svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228} - svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151} - NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036} - svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526} - udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705} - ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262} - ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641} - net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583} - net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377} - drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811} - drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236} - drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887} - drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108} - drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278} - ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920} - wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409} - cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318} - openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678} - svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530} - packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539] - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539] - packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582} - net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539] - net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539] - vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115} - nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227} - s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199] - s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194] - s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194] - nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756} - nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417} - crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972} - vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254] - macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254] - ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744} - vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432} - tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992} - net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052} - net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829} - net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023] - net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023] - tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994} - NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661] - nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481} - netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569} - KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230} - ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669} - ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393] - KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516} - netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255} - netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746} - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048} - gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049} - gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242} - media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994} - media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646] - net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319} - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856} - gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105} - ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270} - KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794} - keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349] - Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136] - dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099} - net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329} - liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368] - vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299} - RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984} - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874] - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874] - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338} - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005} - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609} - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960} - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717} - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997} - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877} - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470} - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760} - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517] - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517] - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501} - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884} - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012} - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695] - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695] - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954} - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476} - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499} - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527} - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065} - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064} - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096} - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931} - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506} - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091} - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090} - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619} - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384} - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074] - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074] - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385} - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560} - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880} - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386} - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497} - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287} - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754} - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455} - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090} - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084} - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923} - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352} - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522} - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665} - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804} - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840} - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958} - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645} - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072] - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056} - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843] - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995} - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883} - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310] - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310] - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310] - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310] - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989} - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013} - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014} - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330] - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589] - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648] - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613] - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502} - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624} - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927} - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395} - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979} - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979} - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847} - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632} - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814} - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076} - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754] - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798] - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823} - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754] - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984] - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984] - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984] - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984] - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984] - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984] - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984] - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790} - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627} - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755] - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489} - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472} - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686} - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686} - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811} - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929} - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930} - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931} - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko) - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201} - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202] - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202] - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202] - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202] - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202] - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202] - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202] - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889} - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974} - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530} - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573} - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740} - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978} - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304} - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662} - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810} - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940} - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648} - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960} - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487} - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971} - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853} - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961} - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615} - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672] - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672] - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672] - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672] - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672] - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672] - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672] - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672] - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672] - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672] - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672] - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672] - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672] - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672] - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672] - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672] - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672] - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672] - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672] - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672] - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672] - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672] - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672] - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672] - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672] - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672] - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672] - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672] - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672] - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672] - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672] - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672] - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672] - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672] - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672] - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672] - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672] - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672] - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672] - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672] - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672] - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672] - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672] - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672] - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672] - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672] - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672] - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672] - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672] - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672] - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672] - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672] - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672] - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672] - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672] - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672] - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672] - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672] - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672] - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672] - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672] - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672] - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672] - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672] - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672] - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672] - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672] - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672] - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672] - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672] - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672] - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672] - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672] - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672] - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672] - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672] - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672] - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672] - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672] - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672] - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672] - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672] - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672] - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672] - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672] - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672] - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672] - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672] - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672] - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672] - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672] - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672] - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672] - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672] - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672] - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672] - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672] - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672] - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672] - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672] - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672] - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672] - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672] - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672] - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672] - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672] - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672] - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672] - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672] - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672] - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672] - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672] - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672] - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672] - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672] - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672] - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672] - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672] - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672] - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672] - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672] - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672] - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476} - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757} - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924} - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286] - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286] - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286] - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286] - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286] - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286] - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286] - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286] - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286] - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077] - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461} - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491} - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660} - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555} - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486} - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017} - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897} - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205] - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924} - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952} - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011} - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900} - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899} - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210] - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896} - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286} - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065} - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020} - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024] - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925} - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217] - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989} - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871} - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600} - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769} - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683} - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023} - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515] - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595} - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894} - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055} - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904] - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904] - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998} - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972} - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939} - RHEL-48620 (Kenneth Yin) [RHEL-48620] - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855} - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101} - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101} - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936] - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936] - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936] - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936] - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646] - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919} - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638} - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412} - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152} - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901} - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044} - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830} - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559} - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902} - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167] - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167] - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953} - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848} - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400] - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027] - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027] - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238} - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237} - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466} - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466} - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800} - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798} - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432} - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432} - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236] - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809} - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570} - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846} - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866} - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797] - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797] - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797] - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131} - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720} - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920} - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013} - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817} - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581} - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042} - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040} - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154} - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508] - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508] - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124} - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478} - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988} - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582} - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977} - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433] - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941} - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988] - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929} - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836} - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226} - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911} - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097} - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939} - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041} - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356} - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007} - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627] - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627] - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627] - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627] - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071} - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874] - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558} - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904} - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246} - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008} - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228} - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002] - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924} - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017} - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042} - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898} - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301} - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976} - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540} - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284} - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857} - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924} - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983} - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854} - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936} - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093} - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961} - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880} - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066} - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839} - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729] - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889} - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000] - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935} - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608} - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586} - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018} - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892} - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062} - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037] - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156] - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757] - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757] - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757] - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757] - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757] - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757] - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757] - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757] - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757] - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757] - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757] - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757] - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757] - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492} - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939} - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075] - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397] - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251] - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251] - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251] - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251] - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052] - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052] - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052] - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052] - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052] - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052] - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052] - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052] - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052] - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052] - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052] - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052] - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052] - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052] - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052] - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052] - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092} - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224] - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292} - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079} - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541} - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399} - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858} - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002] - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702] - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400] - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400] - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400] - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991] - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann) - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709] - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004] - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999] - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263] - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668} - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989} - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990} - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009} - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773} - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257] - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257] - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826} - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100] - loopback: fix lockdep splat (Xin Long) [RHEL-58100] - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100] - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082} - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869] - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869] - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869] - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869] - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869] - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869] - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869] - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869] - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869] - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869] - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080] - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264} - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585] - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256} - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862] - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862] - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988] - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988] - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988] - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988] - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988] - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988] - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988] - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695} - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823] - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823] - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099} - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142} - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043} - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200] - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684] - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684] - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363] - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363] - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363] - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168] - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168] - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122} - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647] - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924] - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974] - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362] - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860] - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088} - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073] - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796] - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649] - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790] - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790] - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790] - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790] - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480] - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480] - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396] - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275} - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275] - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275] - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275] - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891] - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385] - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385] - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451] - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451] - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451] - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451] - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387] - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261] - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458] - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950] - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415] - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161] - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826] - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886] - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599] - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104} - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999] - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999] - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894] - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971] - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229] - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229] - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229] - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807} - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756] - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302} - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197} - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269] - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269] - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269] - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-73269] - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269] - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269] - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937} - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269] - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922} - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694] - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694] - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810] - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934] - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934] - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934] - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832] - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785} - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves) - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208] - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208] - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208] - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208] - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208] - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208] - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208] - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208] - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208] - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208] - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208] - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208] - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208] - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136] - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156] - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119] - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150} - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852] - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852] - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852] - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244] - redhat: drop Y issues from changelog (Jan Stancek) - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673] - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673] - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673] - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673] - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673] - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499] - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141} - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285] - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266] - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266] - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266] - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266] - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342] - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875] - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875] - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875] - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875] - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011} - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072] - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834] - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842} - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963] - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906} - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970} - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717} - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819] - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714] - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714] - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793] - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756} - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756} - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963] - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764} - ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765} - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535] - idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116} - idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182] - idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182] - idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182] - idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182] - idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182] - idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182] - idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182] - idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065} - idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890} - idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182] - idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182] - idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057} - idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182] - idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182] - idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182] - idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182] - idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182] - idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849] - idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064} - idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274} - idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182] - idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932} - idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182] - idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964} - idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182] - redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182] - idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182] - idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182] - idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182] - idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182] - net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182] - idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182] - idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182] - idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182] - idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182] - s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783] - s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783] - s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783] - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783] - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783] - s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783] - s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783] - s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783] - s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783] - s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783] - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825] - cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919} - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409] - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738} - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150} - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991} - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037] - xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037] - s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192] - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846} - SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291] - SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291] - tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291] - xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132] - Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111} - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136} - Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136} - fix backport of "filelock: Remove locks reliably when fcntl/close race is detected" (Scott Mayhew) [RHEL-89709] - NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932] - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557] - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410] - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410] - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410] - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410] - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410] - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410] - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410] - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410] - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410] - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410] - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410] - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410] - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788} - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002} - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760] - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980} - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058} - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723] - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578] - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578] - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154} - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086} - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932} - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452] - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452] - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099] - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099] - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099] - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256] - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977} - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905} - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292] - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292] - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292] - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890} - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415] - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079} - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077} - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698] - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698] - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680} - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095} - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698] - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079] - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928} - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422] - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085} - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727} - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek) - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759} - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991] - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991] - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991] - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991] - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928] - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928] - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928] - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928] - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350} - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159} - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140] - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140] - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140] - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250} - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914} - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717] - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097} - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600] - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200} - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072] - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072] - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072] - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072] - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232] - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232] - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332} - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371] - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477} - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976] - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894] - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313] - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181] - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369] - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369] - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369] - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464} - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758] - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758] - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758] - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758] - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758] - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758] - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758] - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758] - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758] - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758] - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758] - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758] - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758] - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758] - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758] - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758] - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758] - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758] - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758] - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758] - udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353} - net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310} - ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909} - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004} - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959} - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960} - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667} - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958} - mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356} - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-35106] - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106] - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974} - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106] - [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172] - drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172] - Revert "drm/mgag200: Add a workaround for low-latency" (Jocelyn Falempe) [RHEL-36172] - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826} - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730] - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735} - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859} - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243] - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090} - EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464} - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311} - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835} - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813} - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854} - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855} - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852} - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007} - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456} - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495} - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835} - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878} - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877} - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781} - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890} - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700} - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888} - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366] - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366] - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397} - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061] - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669} - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893] - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893] - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893] - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893] - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893] - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845} - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838} - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789} - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801} - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585} - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982} - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069} - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626} - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486] - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615} - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686} - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361] - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361] - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361] - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361] - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804} - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048] - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907} - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906} - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560} - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783] - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130] - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130] - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130] - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130] - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130] - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130] - null_blk: poll queue support (Ming Lei) [RHEL-8130] - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130] - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073} - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555} - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675} - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675} - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952] - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238] - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238] - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439} - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013} - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772] - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772] - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772] - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772] - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052} - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056} - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897} - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693} - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594} - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595} - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610} - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014} - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676] - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676] - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642} - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576] - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307} - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919} - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059} - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912] - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934} - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993} - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659} - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933} - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521] - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521] - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521] - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516] - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744} - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598} - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615} - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779} - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401] - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401] - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055} - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118} - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153} - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872} - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723] - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870] - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870] - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901} - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652] - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652] - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652] - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652] - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652] - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652] - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652] - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652] - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652] - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652] - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652] - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652] - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652] - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652] - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652] - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652] - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652] - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652] - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652] - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652] - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652] - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652] - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652] - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652] - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652] - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652] - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652] - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652] - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652] - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652] - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652] - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652] - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652] - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652] - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652] - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652] - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652] - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652] - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652] - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652] - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652] - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652] - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652] - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652] - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko) - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185} - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579] - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744} - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743} - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664} - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776] - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578} - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528} - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130] - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130] - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444] - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607} - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477} - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565} - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445} - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593} - overlay: disable EVM (Coiby Xu) [RHEL-19863] - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863] - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863] - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286] - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777} - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784] - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162} - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934} - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520} - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340} - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513} - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603} - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782} - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240} - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136] - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456] - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456] - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360] - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360] - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234] - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985} - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812] - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453] - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350} - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107} - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350} - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932} - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392} - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449} - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713] - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160] - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655] - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655] - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125} - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556} - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498} - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498} - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193] - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797} - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609] - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087} - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305} - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228} - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302] - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386} - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817} - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841} - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920] - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297} - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111] - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909] - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909] - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909] - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909] - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909] - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909] - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909] - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909] - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909] - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909] - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909] - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909] - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909] - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909] - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909] - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909] - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909] - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909] - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909] - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909] - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909] - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909] - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909] - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909] - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909] - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909] - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909] - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909] - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909] - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909] - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909] - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909] - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909] - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909] - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909] - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909] - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909] - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909] - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909] - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909] - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909] - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909] - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909] - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909] - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909] - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909] - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909] - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909] - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909] - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909] - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909] - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909] - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909] - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909] - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909] - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909] - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909] - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909] - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909] - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909] - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909] - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909] - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909] - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909] - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909] - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909] - mm: add find_lock_head (Rafael Aquini) [RHEL-104909] - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909] - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909] - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909] - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909] - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909] - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909] - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909] - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909] - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909] - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909] - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909] - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909] - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909] - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909] - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909] - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909] - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849} - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032] - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816] - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816] - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816] - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751} - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681] - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775] - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718} - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005] - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367} - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285] - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300} - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300} - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781] - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781] - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781] - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781] - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781] - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757] - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215] - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215] - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215] - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611] - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178} - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431] - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546] - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546] - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546] - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999} - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244} - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546] - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725} - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179} - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870} - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546] - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546] - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546] - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546] - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546] - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546] - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546] - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546] - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546] - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546] - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752} - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546] - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546] - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546] - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546] - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546] - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546] - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546] - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546] - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546] - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546] - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546] - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546] - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546] - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546] - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546] - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546] - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546] - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546] - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546] - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546] - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546] - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546] - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546] - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546] - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546] - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546] - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546] - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546] - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546] - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546] - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546] - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546] - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546] - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938} - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546] - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546] - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546] - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546] - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546] - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546] - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546] - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546] - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546] - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546] - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546] - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546] - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546] - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546] - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546] - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546] - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546] - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546] - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546] - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546] - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546] - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546] - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546] - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546] - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546] - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546] - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546] - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546] - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546] - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546] - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546] - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546] - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546] - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546] - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546] - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546] - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546] - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546] - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546] - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546] - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546] - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546] - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546] - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546] - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546] - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546] - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546] - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546] - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546] - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546] - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546] - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546] - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546] - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546] - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546] - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515] - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515] - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461] - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461] - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461] - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461] - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461] - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461] - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391] - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391] - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391] - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864} - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745] - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745] - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745] - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745] - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745] - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745] - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257} - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825} - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237] - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724} - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513} - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921] - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921] - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921] - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921] - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921] - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921] - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799] - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968} - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969} - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970} - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971} - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799] - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799] - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972} - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973} - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799] - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122] - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697} - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková) - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774] - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401} - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660] - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660] - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199] - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539} - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543} - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664] - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883} - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154} - Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277} - xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354] - xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354] - x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354] - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819] - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324] - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324] - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933} - smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051} - mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449] - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125456] {CVE-2025-40096} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552} - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285} - media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993} - media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396] - media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396] - media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396] - media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396] - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355] - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355] - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355] - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355] - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355] - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355] - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355] - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240} - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek) - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963] - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171] - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171] - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226] - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226] - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744] - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744] - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744] - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744] - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945] - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117] - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248] - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248] - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742} - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992] - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992] - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489} - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489} - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678] - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678] - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934] - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934] - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934] - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934] - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934] - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934] - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934] - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934] - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934] - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934] - gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann) - arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005] - [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214] - drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214] - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-2505] - x86/boot: Increase section and file alignment to 4k/512 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Split off PE/COFF .data section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop PE/COFF .reloc section (Lenny Szubowicz) [RHEL-2505] - x86/boot: Construct PE/COFF .text section from assembler (Lenny Szubowicz) [RHEL-2505] - x86/boot: Derive file size from _edata symbol (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Remove, discard, or assert for unwanted sections (Lenny Szubowicz) [RHEL-2505] - x86/boot: Check that there are no run-time relocations (Lenny Szubowicz) [RHEL-2505] - x86/boot: Discard .discard.unreachable for arch/x86/boot/compressed/vmlinux (Lenny Szubowicz) [RHEL-2505] - x86/boot: Define setup size in linker script (Lenny Szubowicz) [RHEL-2505] - x86/boot: Set EFI handover offset directly in header asm (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop references to startup_64 (Lenny Szubowicz) [RHEL-2505] - x86/boot: Drop redundant code setting the root device (Lenny Szubowicz) [RHEL-2505] - x86/build: Declutter the build output (Lenny Szubowicz) [RHEL-2505] - x86/boot: Omit compression buffer from PE/COFF image memory footprint (Lenny Szubowicz) [RHEL-2505] - x86/boot: Mark global variables as static (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove extra headroom for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove the 'bugger off' message (Lenny Szubowicz) [RHEL-2505] - x86/efi: Drop alignment flags from PE section headers (Lenny Szubowicz) [RHEL-2505] - efi: Put Linux specific magic number in the DOS header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Fix the missing KASLR_FLAG bit in boot_params->hdr.loadflags (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid physical KASLR on older Dell systems (Lenny Szubowicz) [RHEL-2505] - x86/boot: efistub: Assign global boot_params variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr' (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Avoid legacy decompressor when doing EFI boot (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform SNP feature test while running in the firmware (Lenny Szubowicz) [RHEL-2505] - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add limit argument to efi_random_alloc() (Lenny Szubowicz) [RHEL-2505] - arm64: efi: Limit allocations to 48-bit addressable physical region (Lenny Szubowicz) [RHEL-2505] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Lenny Szubowicz) [RHEL-2505] - arm64: efi: kaslr: Fix occasional random alloc (and boot) failure (Lenny Szubowicz) [RHEL-2505] - efi/libstub/random: Increase random alloc granularity (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Factor out kernel decompression and relocation (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Move global symbol references to C code (Lenny Szubowicz) [RHEL-2505] - decompress: Use 8 byte alignment (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Prefer EFI memory attributes protocol over DXE services (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Perform 4/5 level paging switch from the stub (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Merge trampoline cleanup with switching code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Pass pgtable address to trampoline directly (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Only call the trampoline when changing paging levels (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline directly from C code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Avoid the need for a stack in the 32-bit trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Use standard calling convention for trampoline (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Call trampoline as a normal function (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove .bss/.pgtable from bzImage (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from .head.text code (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Assign paging related global variables earlier (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Clear BSS in EFI handover protocol entrypoint (Lenny Szubowicz) [RHEL-2505] - x86/head_64: Store boot_params pointer in callee save register (Lenny Szubowicz) [RHEL-2505] - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Lenny Szubowicz) [RHEL-2505] - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Lenny Szubowicz) [RHEL-2505] - efi/libstub: Add memory attribute protocol definitions (Lenny Szubowicz) [RHEL-2505] - efi/x86: libstub: remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot: Robustify calling startup_{32,64}() from the decompressor code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Simplify and clean up handover entry code (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Branch straight to kernel entry point from C code (Lenny Szubowicz) [RHEL-2505] - efi/x86: Avoid using code32_start (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use Exit() boot service to exit the stub on errors (Lenny Szubowicz) [RHEL-2505] - efi: x86: Wipe setup_data on pure EFI boot (Lenny Szubowicz) [RHEL-2505] - efi: x86: Fix config name for setting the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi: x86: Set the NX-compatibility flag in the PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Add kernel preferred address to PE header (Lenny Szubowicz) [RHEL-2505] - efi/x86: Use symbolic constants in PE header instead of bare numbers (Lenny Szubowicz) [RHEL-2505] - efi/x86: Drop redundant .bss section (Lenny Szubowicz) [RHEL-2505] - efi/x86: add headroom to decompressor BSS to account for setup block (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove run-time relocations from head_{32,64}.S (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed: Fix debug_puthex() parameter type (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Use 32-bit (zero-extended) MOV for z_output_len (Lenny Szubowicz) [RHEL-2505] - x86/boot: Use unsigned comparison for addresses (Lenny Szubowicz) [RHEL-2505] - x86/boot: Micro-optimize GDT loading instructions (Lenny Szubowicz) [RHEL-2505] - x86/boot: GDT limit value should be size - 1 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Remove GDT setup from efi_main (Lenny Szubowicz) [RHEL-2505] - x86/boot: Clear direction and interrupt flags in startup_64 (Lenny Szubowicz) [RHEL-2505] - efi/x86: Don't depend on firmware GDT layout (Lenny Szubowicz) [RHEL-2505] - x86/boot: Remove KEEP_SEGMENTS support (Lenny Szubowicz) [RHEL-2505] - x86/boot: Handle malformed SRAT tables during early ACPI parsing (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Use mandatory 16-byte stack alignment in mixed mode (Lenny Szubowicz) [RHEL-2505] - efi/libstub/x86: Avoid globals to store context during mixed mode calls (Lenny Szubowicz) [RHEL-2505] - x86/efistub: Disable paging at mixed mode entry (Lenny Szubowicz) [RHEL-2505] - x86: efi/random: Invoke EFI_RNG_PROTOCOL to seed the UEFI RNG table (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make some functions local (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate data appropriately (Lenny Szubowicz) [RHEL-2505] - x86/boot: Annotate local functions (Lenny Szubowicz) [RHEL-2505] - x86/asm: Make more symbols local (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix missing initialization in find_trampoline_placement() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Fix boot on machines with broken E820 table (Lenny Szubowicz) [RHEL-2505] - x86, boot: Remove multiple copy of static function sanitize_boot_params() (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Remove unused variable (Lenny Szubowicz) [RHEL-2505] - x86/boot/compressed/64: Explain paging_prepare()'s return value (Lenny Szubowicz) [RHEL-2505] - x86/boot: Save several bytes in decompressor (Lenny Szubowicz) [RHEL-2505] - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Audra Mitchell) [RHEL-20614] {CVE-2024-0841} - net/gve: update check for little-endianness in gve kconfig (Joshua Washington) [RHEL-29030] - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23430] {CVE-2024-26602} - NFS: Set the stable writes flag when initialising the super block (Benjamin Coddington) [RHEL-25266] - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-21685] {CVE-2024-0565} - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command (Ming Lei) [RHEL-23942] - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler (Ming Lei) [RHEL-23942] - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Andrew Price) [RHEL-26501] {CVE-2023-52448} - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [RHEL-26241] {CVE-2023-52434} - smb3: Replace smb2pdu 1-element arrays with flex-arrays (Jay Shin) [RHEL-22143] - cifs: Replace remaining 1-element arrays (Jay Shin) [RHEL-22143] - cifs: Convert struct fealist away from 1-element array (Jay Shin) [RHEL-22143] - cifs: remove unneeded 2bytes of padding from smb2 tree connect (Jay Shin) [RHEL-22143] - cifs: Replace zero-length arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: Replace a couple of one-element arrays with flexible-array members (Jay Shin) [RHEL-22143] - cifs: fix FILE_BOTH_DIRECTORY_INFO definition (Jay Shin) [RHEL-22143] - nfsd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - nfs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - lockd: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - cifs: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - ceph: use locks_inode_context helper (Jeffrey Layton) [RHEL-27441] - filelock: add a new locks_inode_context accessor function (Jeffrey Layton) [RHEL-27441] - dm-integrity, dm-verity: reduce stack usage for recheck (Benjamin Marzinski) [RHEL-27849] - dm-crypt: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - dm-crypt: don't modify the data when using authenticated encryption (Benjamin Marzinski) [RHEL-27849] - dm-verity: recheck the hash after a failure (Benjamin Marzinski) [RHEL-27849] - dm-integrity: recheck the integrity tag after a failure (Benjamin Marzinski) [RHEL-27849] - tracing/timerlat: Move hrtimer_init to timerlat_fd open() (John Kacur) [RHEL-26667] - tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-19537] - ipvlan: Add handling of NETDEV_UP events (Hangbin Liu) [RHEL-19098] - ceph: add ceph_cap_unlink_work to fire check_caps() immediately (Xiubo Li) [RHEL-21760] - ceph: always queue a writeback when revoking the Fb caps (Xiubo Li) [RHEL-21760] - ceph: always check dir caps asynchronously (Xiubo Li) [RHEL-21760] - nfs: fix redundant readdir request after get eof (Benjamin Coddington) [RHEL-7780] - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix pnfs MDS=DS session trunking (Scott Mayhew) [RHEL-7994] - NFSv4.1: fix zero value filehandle in post open getattr (Scott Mayhew) [RHEL-7994] - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Scott Mayhew) [RHEL-7994] - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - Require Python with tarfile filters Resolves: RHEL-25446 - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218241 - Remove bundled windows executables - Resolves: rhbz#2006788 - Support of yanked releases Resolves: rhbz#2000135 - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references Resolves: rhbz#1962856 - Fix bash completion files and simplify spec Resolves: rhbz#1904478 - Patch for pip install <url> allow directory traversal, leading to arbitrary file write Resolves: rhbz#1868016 - Remove unused CA bundle from the bundled requests library Resolves: rhbz#1775200 - Add four new patches for CVEs in bundled urllib3 and requests CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074 Resolves: rhbz#1649153 Resolves: rhbz#1700824 Resolves: rhbz#1702473 Resolves: rhbz#1643829 - Create python-pip-wheel package with the wheel Resolves: rhbz#1718031 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Update to 3.9 - Rebuild for Python 3.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Cleanup spec file conditionals - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Conditionalize the python2 subpackage - Make MD5 fingerprint FIPS compliant - Resolves: rhbz#1747490 - Include README.MD and LICENSE (#1464435) - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - Update translations (#1962009) - python/semanage: Allow modifying records on "add" (RHEL-28167) - python/semanage: Do not sort local fcontext definitions (RHEL-24461) - Harden more tools against "rogue" modules (RHEL-17351) - sepolicy: port to dnf4 python API (RHEL-17398) - Update translations (#2124826) - python/sepolicy: Cache conditional rule queries (#2155540) - python/sepolicy: add missing booleans to man pages (#2155540) - python: Harden tools against "rogue" modules (#2128976) - Update "pathfix" arguments to match ^^^ (#2128976) - python: Do not query the local database if the fcontext is non-local (#2124825) - python: Split "semanage import" into two transactions (#2063353) - semodule: rename --rebuild-if-modules-changed to --refresh (#2089802) - selinux-autorelabel: Do not force reboot (#2093133) - semodule: move module hashing into libsemanage (requires libsemanage-2.9-7) - semodule: add command-line option to detect module changes (#2049189) - Improve error message when selabel_open fails (#1926511) - semodule: add -m | --checksum option - rebuilt - rebuilt - Japan translation update (remove extra dot) Resolves: rhbz#2122609 - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement [updated] - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement - Translation updates - Add usersubstr check for substrings of N characters from the username patch by Danny Sauer - pam_pwquality: Abort the retry loop if user requests it - Allow setting retry, enforce_for_root, and local_users_only options in the pwquality.conf config file - Fix an issue found in Coverity scan - Properly conditionalize the python buildrequires - Add conditionals for Python2 and Python3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - rebuild to update yacctab.py - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Rebuild for Python 3.6 - Ship python2-pycparser - Modernize spec - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Cleanup spec file conditionals - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Conditionalize the python2 subpackage - update to 2.1.5 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Rebuild for Python 3.6 - Add missing BuildRequires for python-setuptools - update to 2.1.10 - do not own __pycache__ - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild as wheel - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Remove the empty pyparsing package, provide and obsolete it from python2-pyparsing - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Remove Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1567403 - Ship python34-pysocks in EPEL7 - Update to 1.5.7 - Ship python34-pysocks in EL6 - Rebuild for Python 3.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Latest upstream - Add setuptools dependency - Update to 1.6.8. Fixes bug #1528490 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Remove the Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1590407 - Never raise a DeviceNotFoundError when iterating over a device enumeration - Device.subsystem() now returns None if device has no subsystem - Add DeprecationWarnings to deprecated Device methods - Replace "/" with "!" in Device.from_name() sys_name parameter - Add some unstable classes for parsing some kinds of values - Make version info more like Python's including micro numbers and levels - Refactor some internal modules into subdirectories - Work on tests and reproducers - Remove parsing code added in previous release - No longer do CI for Python 2.6 - Eliminate all wildcard imports and __all__ statements - No longer use deprecated Device.from_sys_path() method - Minor pylint induced changes - Documentation fixes - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Deprecate use of Device object as mapping from udev property names to values - Add a Properties class and a Device.properties() method for udev properties - Fix places where Device object was incorrectly used in a boolean context - Return an empty string, not None, if the property value is an empty string - Exceptions re-raised from libudev calls now have a message string - Insert a warning about using a Device in a boolean context in docs - Infrastructure for vagrant tests is removed - Various internal refactorings - Extensive test improvements - Numerous documentation fixes - Rebuild for Python 3.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Dropped python2 from RHEL-8 - Bumped release to fix conflict caused by automerge - Dropped qt4 from RHEL-8 (#1591123) - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Python 2 binary package renamed to python2-pywbem See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Upgrade to 0.11.0 - Add missing runtime dependency python2-ply and python3-ply - Fedora 25 does not have python2-pip, use python-pip instead. - Fix directory ownership - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Remove python-twisted dependency (RHBZ 1561647) - Drop the python2 subpackage - Fix the conflict with sblim-wbemcli: RHBZ #1757855 - Corrected warning about multiple file inclusion - Remove the Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1590281 - Rename python3-PyYAML to python3-pyyaml - Modernize spec - Fix python2 invocation - Cherry-picked from: https://src.fedoraproject.org/rpms/PyYAML/pull-request/2 - Use python2 macros instead of unversioned python macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) - Cleanup spec file conditionals - Add Provides for the old name without %_isa - Python 2 binary package renamed to python2-pyyaml See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Bump release to fix upgrade path from 2.20.0-2.1.el8_1 via 2.20.0-3.el8_8 to 2.20.0-4.el8 Related: rhbz#2209469 - Security fix for CVE-2023-32681 Resolves: rhbz#2209469 - Properly handle default ports when stripping the authorization header Resolves: rhbz#1752799 - Update to v2.20.0 for CVE-2018-18074. - Remove the Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1590396 - Allow build with Python 2 - Remove the python-pytest-cov dependency - Update to v2.19.1 (rhbz 1591531) - Update to v2.19.0 (rhbz 1590508) - Skip all tests needing httpbin: httpbin has too many dependencies to be shipped in RHEL just for build-time package tests - Security fix for CVE-2024-35195 Resolves: RHEL-37605 - Bump release to fix upgrade path from 2.20.0-2.1.el8_1 via 2.20.0-3.el8_8 to 2.20.0-4.el8 Related: rhbz#2209469 - Security fix for CVE-2023-32681 Resolves: rhbz#2209469 - Properly handle default ports when stripping the authorization header Resolves: rhbz#1752799 - Update to v2.20.0 for CVE-2018-18074. - Remove the Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1590396 - Allow build with Python 2 - Remove the python-pytest-cov dependency - Update to v2.19.1 (rhbz 1591531) - Update to v2.19.0 (rhbz 1590508) - Security fix for CVE-2024-47081 Resolves: RHEL-102420 - Security fix for CVE-2024-35195 Resolves: RHEL-37605 - Bump release to fix upgrade path from 2.20.0-2.1.el8_1 via 2.20.0-3.el8_8 to 2.20.0-4.el8 Related: rhbz#2209469 - Security fix for CVE-2023-32681 Resolves: rhbz#2209469 - Properly handle default ports when stripping the authorization header Resolves: rhbz#1752799 - Update to v2.20.0 for CVE-2018-18074. - Remove the Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1590396 - Allow build with Python 2 - Remove the python-pytest-cov dependency - Update to v2.19.1 (rhbz 1591531) - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Rebuild for Python 3.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 0.8.0. - Make sure to specify package versions required. Fixes bug #1320683 - bring spec file for fedora & rhel closer together - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Conditionalize the python2 subpackage - Unify Fedora/RHEL py2/py3 logic - upgrade to new upstream release 1.0.0 - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Updates to the gating tests from mhoyer - Update the gating tests - Fix the gating tests - Update to the latest upstream version - Update to the latest upstream version - Merge a fix to prevent a potential data leak when saving the config file - Update to new upstream version - Update to new upstream version - LIO should use /var/target for its runtime files - Remove support to qla2xxx - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - Added OSCI gating framework Resolves: rhbz#1682408 - Fix upstream URL reference and source Resolves: rhbz#1596854 - Drop the python2 subpackage and only build the python3 subpackage Resolves: rhbz#1579904 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - duplicated license line in file list - added python 3 support - Python 2 binary package renamed to python2-schedutils See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Disable/remove neverallow options in sediff (#2184141) - Disable/remove neverallow options in frontends (#2184141) - AVRuleXperm: Fix permission set creation for AVTAB_XPERMS_IOCTLDRIVER (#2174376) - Make seinfo output predictable (#2019961) - Support old boolean names in policy queries (#1595572, #1581848) - SETools 4.3.0 release (#1820079) - Revised sediff method for TE rules. This drastically reduced memory and run time. - Added infiniband context support to seinfo, sediff, and apol. - Added apol configuration for location of Qt assistant. - Fixed sediff issue where properties header would display when not requested. - Fixed sediff issue with type_transition file name comparison. - Fixed permission map socket sendto information flow direction. - Added methods to TypeAttribute class to make it a complete Python collection. - Genfscon now will look up classes rather than using fixed values which were dropped from libsepol. - setools requires -console, -console-analyses and -gui packages (#1820078) - Build setools-console-analyses and setools-gui (#1731519) - SETools 4.2.2 release - Use CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CFLAGS ; CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection - SELinuxPolicy: Create a map of aliases on policy load (#1672631) - SETools 4.2.1 release (#1581761, #1595582) - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 - Create /usr/local/lib/pythonX.Y when needed Resolves: rhbz#1808301 - Add subpackages with wheels Resolves: rhbz#1718032 - New subpackage platform-python-setuptools without files from /usr/bin/* - python3-setuptools contains only files from /usr/bin/* and depends on platform-python-setuptools - Resolves: rhbz#1641973 - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Do not use wheel on Python 2 - update to 39.2.0 Fixes bug #1572889 - Remove test requirements on python2 packages and some exotic packages - Skip tests on Python 2 - update to 39.0.1 Fixes bug #1531527 - Skip test_virtualenv due to broken executable detection - Security fix for CVE-2024-6345 Resolves: RHEL-50470 - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 - Create /usr/local/lib/pythonX.Y when needed Resolves: rhbz#1808301 - Add subpackages with wheels Resolves: rhbz#1718032 - New subpackage platform-python-setuptools without files from /usr/bin/* - python3-setuptools contains only files from /usr/bin/* and depends on platform-python-setuptools - Resolves: rhbz#1641973 - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Do not use wheel on Python 2 - update to 39.2.0 Fixes bug #1572889 - Remove test requirements on python2 packages and some exotic packages - Skip tests on Python 2 - update to 39.0.1 Fixes bug #1531527 - Security fix for CVE-2025-47273 Resolves: RHEL-96802 - Security fix for CVE-2024-6345 Resolves: RHEL-50470 - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 - Create /usr/local/lib/pythonX.Y when needed Resolves: rhbz#1808301 - Add subpackages with wheels Resolves: rhbz#1718032 - New subpackage platform-python-setuptools without files from /usr/bin/* - python3-setuptools contains only files from /usr/bin/* and depends on platform-python-setuptools - Resolves: rhbz#1641973 - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Do not use wheel on Python 2 - update to 39.2.0 Fixes bug #1572889 - Remove test requirements on python2 packages and some exotic packages - Skip tests on Python 2 - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 - Create /usr/local/lib/pythonX.Y when needed Resolves: rhbz#1808301 - Add subpackages with wheels Resolves: rhbz#1718032 - New subpackage platform-python-setuptools without files from /usr/bin/* - python3-setuptools contains only files from /usr/bin/* and depends on platform-python-setuptools - Resolves: rhbz#1641973 - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Do not use wheel on Python 2 - update to 39.2.0 Fixes bug #1572889 - Remove test requirements on python2 packages and some exotic packages - Skip tests on Python 2 - update to 39.0.1 Fixes bug #1531527 - Skip test_virtualenv due to broken executable detection - Security fix for CVE-2024-6345 Resolves: RHEL-50470 - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 - Create /usr/local/lib/pythonX.Y when needed Resolves: rhbz#1808301 - Add subpackages with wheels Resolves: rhbz#1718032 - New subpackage platform-python-setuptools without files from /usr/bin/* - python3-setuptools contains only files from /usr/bin/* and depends on platform-python-setuptools - Resolves: rhbz#1641973 - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Do not use wheel on Python 2 - update to 39.2.0 Fixes bug #1572889 - Remove test requirements on python2 packages and some exotic packages - Skip tests on Python 2 - update to 39.0.1 Fixes bug #1531527 - Security fix for CVE-2025-47273 Resolves: RHEL-96802 - Security fix for CVE-2024-6345 Resolves: RHEL-50470 - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 - Create /usr/local/lib/pythonX.Y when needed Resolves: rhbz#1808301 - Add subpackages with wheels Resolves: rhbz#1718032 - New subpackage platform-python-setuptools without files from /usr/bin/* - python3-setuptools contains only files from /usr/bin/* and depends on platform-python-setuptools - Resolves: rhbz#1641973 - Allow Python 2 for build see https://hurl.corp.redhat.com/rhel8-py2 - Do not use wheel on Python 2 - update to 39.2.0 Fixes bug #1572889 - Remove test requirements on python2 packages and some exotic packages - Skip tests on Python 2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Added the platform-python subpackage - Update to 1.11.0 - Removed and obsoleted the platform-python subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Allow build with Python 2 - Conditionalize bulding wheel on Python 2 - Do not use wheel on Python 2 - Drop dependency on python2-tkinter This results in one skipped test. - Disable the Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1594157 - Release bump - Make firewalld to not log errors when running commands as root in the absence of polkitd. Resolves: rhbz#2076606 - Remove the Python 2 subpackages https://bugzilla.redhat.com/show_bug.cgi?id=1566681 - Also rename python-slip-dbus and python-slip-gtk to python2-* - Add missing %python_provide macros - Use new python2- names in dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Python 2 binary package renamed to python2-slip See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild for Python 3.6 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Release bump - Make firewalld to not log errors when running commands as root in the absence of polkitd. Resolves: rhbz#2076606 - Remove the Python 2 subpackages https://bugzilla.redhat.com/show_bug.cgi?id=1566681 - Also rename python-slip-dbus and python-slip-gtk to python2-* - Add missing %python_provide macros - Use new python2- names in dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Python 2 binary package renamed to python2-slip See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild for Python 3.6 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Backport Allow to break arch lock-step on erase operations (RhBug:2172288,2172292) - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep (RhBug:2185061,2190136) - Drop patch to fix pick of old build (RhBug:2150300,RhBug:2151551) - Allow accessing toolversion at runtime and increase it - Add support for storing user data in a solv file - Improve choice rule generation - Update to 0.7.20 - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies - support for environments in comps parser - fix misparsing of '&' in attributes with libxml2 - choice rules: treat orphaned packages as newest - fix compatibility with Python 3.10 - Update to 0.7.19 - repo_add_conda: add flag to skip v2 packages - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt - fix error handling in solv_xfopen_fd() - fix memory leaks - Fix rpm dependency - Update to 0.7.17 - selected bug fixes: * repo_write: fix handling of nested flexarray * improve choicerule generation a bit more to cover more cases * harden testcase parser against repos being added too late * support python-3.10 * check /var/lib/rpm macro in rpmdb code - new features: * handle default/visible/langonly attributes in comps parser * support multiple collections in updateinfo parser * add '-D' option in rpmdb2solv to set the dbpath - Enable zstd compression in libsolv - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178970) - Backport Allow to break arch lock-step on erase operations (RhBug:2172288,2172292) - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep (RhBug:2185061,2190136) - Drop patch to fix pick of old build (RhBug:2150300,RhBug:2151551) - Allow accessing toolversion at runtime and increase it - Add support for storing user data in a solv file - Improve choice rule generation - Update to 0.7.20 - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies - support for environments in comps parser - fix misparsing of '&' in attributes with libxml2 - choice rules: treat orphaned packages as newest - fix compatibility with Python 3.10 - Update to 0.7.19 - repo_add_conda: add flag to skip v2 packages - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt - fix error handling in solv_xfopen_fd() - fix memory leaks - Fix rpm dependency - Update to 0.7.17 - selected bug fixes: * repo_write: fix handling of nested flexarray * improve choicerule generation a bit more to cover more cases * harden testcase parser against repos being added too late * support python-3.10 * check /var/lib/rpm macro in rpmdb code - new features: * handle default/visible/langonly attributes in comps parser * support multiple collections in updateinfo parser * add '-D' option in rpmdb2solv to set the dbpath - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - Translated using Weblate (Spanish) (ptoscano@redhat.com) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - Translated using Weblate (German) (atalanttore@googlemail.com) - New extraction for translatable strings (ptoscano@redhat.com) - Base DBusServerStubProvider on SubManFixture (mhorky@redhat.com) - Mark D-Bus tests (mhorky@redhat.com) - Remove unused classes of DBus tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Unregister (mhorky@redhat.com) - ENT-5350: Implement "force" register option in rhsm dbus python bindings (mhorky@redhat.com) - ENT-5533: Fix failures of D-Bus' Register tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Register (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Products (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of AllFacts (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Entitlement (mhorky@redhat.com) - Fix typo in method name of EntitlementService (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Consumer (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Attach (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Config (mhorky@redhat.com) - Skip AsyncPool tests (mhorky@redhat.com) - Catch generic OSError during BaseRestLib._request() (ptoscano@redhat.com) - Catch also CertificateLoadingError for identity cert loading (ptoscano@redhat.com) - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com) - Improve formatting of CertificateLoadingError (ptoscano@redhat.com) - Raise a new CertificateLoadingError on X.509 loading failures (ptoscano@redhat.com) - Improve formatting of UnknownContentException (ptoscano@redhat.com) - connection: improve the internal UnknownContentException (ptoscano@redhat.com) - utils: add terminal_printable_content (ptoscano@redhat.com) - connection: rename NetworkException to UnknownContentException (ptoscano@redhat.com) - Improve formatting of ProxyException (ptoscano@redhat.com) - connection: improve the internal ProxyException (ptoscano@redhat.com) - Improve formatting of socket.gaierror (ptoscano@redhat.com) - Improve formatting of ConnectionError (ptoscano@redhat.com) - Improve formatting of BadCertificateException (ptoscano@redhat.com) - connection: extend BadCertificateException w/ SSL exception (ptoscano@redhat.com) - connection: drop dead code (ptoscano@redhat.com) - ENT-4286: Additional fix for exception handling (jajerome@redhat.com) - ENT-4286: Simplify exception reporting with system_exit() (jajerome@redhat.com) - Cloud-what: Make saving token file more robust (jhnidek@redhat.com) - Remove deprecated function call (mhorky@redhat.com) - Fix failures of D-Bus' Register tests (mhorky@redhat.com) - Show locals in pytest output (mhorky@redhat.com) - tito: add rhel 8.8 releaser (ptoscano@redhat.com) - Translated using Weblate (Japanese) (suanand@redhat.com) - Translated using Weblate (French) (vincent.lefebvre59@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - ENT-5510: Fix issues with proxy and cockpit interaction (jajerome@redhat.com) - 2118486: [1.28] Implement "force" register option in rhsm dbus python binding (jajerome@redhat.com) - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Italian) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Spanish) (fserrador@gmail.com) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (French) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (German) (atalanttore@googlemail.com) - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - tests: fix mocking of get_terminal_width() in TestColumnize (ptoscano@redhat.com) - feat: print compliance errors & syspurpose status only in entitlement mode (ptoscano@redhat.com) - feat: print "registered" as status when using SCA (ptoscano@redhat.com) - feat: print "not registered" on status when not registered (ptoscano@redhat.com) - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com) - refactor: move determination of content access mode in own method (ptoscano@redhat.com) - tests: move StubIdentity to stubs (ptoscano@redhat.com) - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com) - chore: move banner printing to its own function (ptoscano@redhat.com) - ci: bump actions/upload-artifact from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - ci: bump actions/checkout from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - test: cockpit: switch to CERT auth for insights-client (ptoscano@redhat.com) - test: cockpit: mock-insights: implement upload and delete platform endpoints (ptoscano@redhat.com) - test: cockpit: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com) - test: cockpit: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com) - feat: cockpit: switch from .last-upload.results to .lastupload (ptoscano@redhat.com) - chore: cockpit: test: use the new syspurpose command (ptoscano@redhat.com) - test: cockpit: wait more when registering to Insights (ptoscano@redhat.com) - test: cockpit: break insights-client in a different way (ptoscano@redhat.com) - test: cockpit: mock-insights: return 404 for missing systems in /systems (ptoscano@redhat.com) - test: cockpit: wait longer in certain situations (ptoscano@redhat.com) - test: cockpit: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com) - chore(ci): Use Vault for CentOS Stream 8 (mhorky@redhat.com) - fix: Hide subscription management "errors" in container mode (mhorky@redhat.com) - feat: 1.28 Added more AWS cloud facts (jhnidek@redhat.com) - feat: 1.28 Added zone GCP fact (jhnidek@redhat.com) - feat: 1.28 Azure: added extended location and type of location fact (jhnidek@redhat.com) - fix: 1.28 Update version of Azure metadata (jhnidek@redhat.com) - feat: 1.28 Added Azure location to facts (jhnidek@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - Translated using Weblate (Spanish) (ptoscano@redhat.com) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - Translated using Weblate (German) (atalanttore@googlemail.com) - New extraction for translatable strings (ptoscano@redhat.com) - Base DBusServerStubProvider on SubManFixture (mhorky@redhat.com) - Mark D-Bus tests (mhorky@redhat.com) - Remove unused classes of DBus tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Unregister (mhorky@redhat.com) - ENT-5350: Implement "force" register option in rhsm dbus python bindings (mhorky@redhat.com) - ENT-5533: Fix failures of D-Bus' Register tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Register (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Products (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of AllFacts (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Entitlement (mhorky@redhat.com) - Fix typo in method name of EntitlementService (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Consumer (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Attach (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Config (mhorky@redhat.com) - Skip AsyncPool tests (mhorky@redhat.com) - Catch generic OSError during BaseRestLib._request() (ptoscano@redhat.com) - Catch also CertificateLoadingError for identity cert loading (ptoscano@redhat.com) - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com) - Improve formatting of CertificateLoadingError (ptoscano@redhat.com) - Raise a new CertificateLoadingError on X.509 loading failures (ptoscano@redhat.com) - Improve formatting of UnknownContentException (ptoscano@redhat.com) - connection: improve the internal UnknownContentException (ptoscano@redhat.com) - utils: add terminal_printable_content (ptoscano@redhat.com) - connection: rename NetworkException to UnknownContentException (ptoscano@redhat.com) - Improve formatting of ProxyException (ptoscano@redhat.com) - connection: improve the internal ProxyException (ptoscano@redhat.com) - Improve formatting of socket.gaierror (ptoscano@redhat.com) - Improve formatting of ConnectionError (ptoscano@redhat.com) - Improve formatting of BadCertificateException (ptoscano@redhat.com) - connection: extend BadCertificateException w/ SSL exception (ptoscano@redhat.com) - connection: drop dead code (ptoscano@redhat.com) - ENT-4286: Additional fix for exception handling (jajerome@redhat.com) - ENT-4286: Simplify exception reporting with system_exit() (jajerome@redhat.com) - Cloud-what: Make saving token file more robust (jhnidek@redhat.com) - Remove deprecated function call (mhorky@redhat.com) - Fix failures of D-Bus' Register tests (mhorky@redhat.com) - Show locals in pytest output (mhorky@redhat.com) - tito: add rhel 8.8 releaser (ptoscano@redhat.com) - Translated using Weblate (Japanese) (suanand@redhat.com) - Translated using Weblate (French) (vincent.lefebvre59@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - ENT-5510: Fix issues with proxy and cockpit interaction (jajerome@redhat.com) - 2118486: [1.28] Implement "force" register option in rhsm dbus python binding (jajerome@redhat.com) - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Italian) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Spanish) (fserrador@gmail.com) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (French) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (German) (atalanttore@googlemail.com) - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - tests: fix mocking of get_terminal_width() in TestColumnize (ptoscano@redhat.com) - feat: print compliance errors & syspurpose status only in entitlement mode (ptoscano@redhat.com) - feat: print "registered" as status when using SCA (ptoscano@redhat.com) - feat: print "not registered" on status when not registered (ptoscano@redhat.com) - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com) - refactor: move determination of content access mode in own method (ptoscano@redhat.com) - tests: move StubIdentity to stubs (ptoscano@redhat.com) - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com) - chore: move banner printing to its own function (ptoscano@redhat.com) - ci: bump actions/upload-artifact from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - ci: bump actions/checkout from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - test: cockpit: switch to CERT auth for insights-client (ptoscano@redhat.com) - test: cockpit: mock-insights: implement upload and delete platform endpoints (ptoscano@redhat.com) - test: cockpit: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com) - test: cockpit: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com) - feat: cockpit: switch from .last-upload.results to .lastupload (ptoscano@redhat.com) - chore: cockpit: test: use the new syspurpose command (ptoscano@redhat.com) - test: cockpit: wait more when registering to Insights (ptoscano@redhat.com) - test: cockpit: break insights-client in a different way (ptoscano@redhat.com) - test: cockpit: mock-insights: return 404 for missing systems in /systems (ptoscano@redhat.com) - test: cockpit: wait longer in certain situations (ptoscano@redhat.com) - test: cockpit: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com) - chore(ci): Use Vault for CentOS Stream 8 (mhorky@redhat.com) - fix: Hide subscription management "errors" in container mode (mhorky@redhat.com) - feat: 1.28 Added more AWS cloud facts (jhnidek@redhat.com) - feat: 1.28 Added zone GCP fact (jhnidek@redhat.com) - feat: 1.28 Azure: added extended location and type of location fact (jhnidek@redhat.com) - fix: 1.28 Update version of Azure metadata (jhnidek@redhat.com) - feat: 1.28 Added Azure location to facts (jhnidek@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - Conditionalize the python2 subpackage - Conditionalize the doc subpackage - Allow Python 2 for build - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Use separate license and documentation directories - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to latest version - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild for Python 3.6 - resolves: RHEL-16508 - Rebase to version 2.4.1 - resolves: rhbz#2190419 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190419 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190419 - Rebase to version 2.4.0 - resolves: rhbz#2132056 - Update to version 2.3.4 - resolves: rhbz#2100088 - Rebuild to include python3-talloc-devel in CRB - resolves: rhbz#2013601 - Update to version 2.3.3 - resolves: rhbz#1945014 - Update to version 2.3.2 - resolves: rhbz#1817560 - Update to version 2.3.1 - related: rhbz#1754417 - Fix PY3 symbol names - resolves: RHEL-16507 - Update to version libtdb-1.4.9 - resolves: rhbz#2190421 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190421 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190421 - Update to version 1.4.8 - resolves: rhbz#2132054 - Rebase to version 1.4.7 - resolves: rhbz#2077482 - Rebase to version 1.4.6 * resolves: rhbz#2013604 - Rebase to version 1.4.4 - Resolves: rhbz#1817565 - Rebase libtdb 1.4.3 for samba - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba - Related: rhbz#1754420 - Fix sssd tests (tdb) - Obsolete the python2 packages on upgrade - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8 - Add AlmaLinux to supported distros - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Security fix for CVE-2023-6597 Resolves: RHEL-33671 - Fix build with expat with fixed CVE-2023-52425 Related: RHEL-33671 - Security fix for CVE-2023-27043 Resolves: RHEL-20610 - Security fix for CVE-2022-48564 Resolves: RHEL-16674 - Skip tests failing on s390x Resolves: RHEL-19252 - Security fix for CVE-2022-48560 Resolves: RHEL-16707 - Security fix for CVE-2023-40217 Resolves: RHEL-3041 - Fix symlink handling in the fix for CVE-2007-4559 Resolves: rhbz#263261 - Bump release for rebuild Resolves: rhbz#2173917 - Add AlmaLinux to supported distros - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Security fix for CVE-2023-6597 Resolves: RHEL-33671 - Fix build with expat with fixed CVE-2023-52425 Related: RHEL-33671 - Security fix for CVE-2023-27043 Resolves: RHEL-20610 - Add AlmaLinux to supported distros - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Security fix for CVE-2023-6597 Resolves: RHEL-33671 - Add AlmaLinux to supported distros - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Security fix for CVE-2024-0450 Resolves: RHEL-33683 - Add AlmaLinux to supported distros - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Security fix for CVE-2024-4032 Resolves: RHEL-44060 - Add AlmaLinux to supported distros - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add explicit RPM Provides for /usr/libexec/platform-python Resolves: RHEL-48605 - Add AlmaLinux to supported distros - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Build Python with -O3 - https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3 - Add AlmaLinux to supported distros - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Security fix for CVE-2024-6923 Resolves: RHEL-53065 - Add AlmaLinux to supported distros - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Security fix for CVE-2024-6232 Resolves: RHEL-57399 - Add AlmaLinux to supported distros - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Security fix for CVE-2024-9287 Resolves: RHEL-64878 - Add AlmaLinux to supported distros - Security fix for CVE-2026-15308 Resolves: RHEL-193772 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Security fix for CVE-2024-11168 Resolves: RHEL-67252 - Add AlmaLinux to supported distros - Security fix for CVE-2026-11940 Resolves: RHEL-227194 - Security fix for CVE-2026-15308 Resolves: RHEL-193772 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98030, RHEL-97987, RHEL-98232, RHEL-98065, RHEL-98189 - Add AlmaLinux to supported distros - Security fixes for CVE-2026-12345, CVE-2026-19445, CVE-2026-19553 Resolves: RHEL-272935, RHEL-276260, RHEL-274107 - Security fix for CVE-2026-11940 Resolves: RHEL-227194 - Security fix for CVE-2026-15308 Resolves: RHEL-193772 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-167890, RHEL-168128 - Security fix for CVE-2026-4519 Resolves: RHEL-158077 - Security fix for CVE-2025-0938 Resolves: RHEL-153235 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367, CVE-2026-1299 Resolves: RHEL-143063, RHEL-143120, RHEL-144860 - Security fix for CVE-2025-12084 Resolves: RHEL-135911 - Security fix for CVE-2025-8194 Resolves: RHEL-106333 - resolves: RHEL-16504 - update to version 0.16.0 - resolves: rhbz#2190425 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190425 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190425 Update to version 0.14.1 - resolves: rhbz#2132055 - Update to version 0.13.0 - resolves: rhbz#2077485 - Update to version 0.12.0 - resolves: rhbz#1980346 - Update to version 0.11.0 - Resolves: #1817563 - Upgrade tevent to 0.10.2 version for samba - Resolves: #1754421 - Upgrade tevent to 0.10.0 version for samba - Related: #1754421 - Fix sssd tests (tevent) - Remove the python2 subpackages on upgrade - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8 - Security fix for CVE-2026-44431 Resolves: RHEL-184858 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139410 - Security fix for CVE-2024-37891 Resolves: RHEL-45334 - Security fix for CVE-2023-45803 Resolves: RHEL-16872 - Security fix for CVE-2023-43804 Resolves: RHEL-11992 - Security fix for CVE-2020-26137 Resolves: rhbz#1883889 - Update RECENT_DATE dynamically Resolves: rhbz#1761380 - Enable TLS 1.3 post-handshake authentication - Adjust RECENT_DATE variable according to rules Resolves: rhbz#1726743 - Rebuilding after gating was enabled - Resolves: rhbz#1703361 rhbz#1706026 - Rebased to 1.24.2 to fix CVE-2019-11324 - Added patches for CVE-2019-11236 (AKA CVE-2019-9740) - Resolves: rhbz#1703361 rhbz#1706026 - Security fix for CVE-2023-45803 Resolves: RHEL-16872 - Security fix for CVE-2023-43804 Resolves: RHEL-11992 - Security fix for CVE-2020-26137 Resolves: rhbz#1883889 - Update RECENT_DATE dynamically Resolves: rhbz#1761380 - Enable TLS 1.3 post-handshake authentication - Adjust RECENT_DATE variable according to rules Resolves: rhbz#1726743 - Rebuilding after gating was enabled - Resolves: rhbz#1703361 rhbz#1706026 - Rebased to 1.24.2 to fix CVE-2019-11324 - Added patches for CVE-2019-11236 (AKA CVE-2019-9740) - Resolves: rhbz#1703361 rhbz#1706026 - Remove the Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1590400 - Allow build with Python 2 - Skip tests that require tornado - Security fix for CVE-2024-37891 Resolves: RHEL-45334 - Security fix for CVE-2023-45803 Resolves: RHEL-16872 - Security fix for CVE-2023-43804 Resolves: RHEL-11992 - Security fix for CVE-2020-26137 Resolves: rhbz#1883889 - Update RECENT_DATE dynamically Resolves: rhbz#1761380 - Enable TLS 1.3 post-handshake authentication - Adjust RECENT_DATE variable according to rules Resolves: rhbz#1726743 - Rebuilding after gating was enabled - Resolves: rhbz#1703361 rhbz#1706026 - Rebased to 1.24.2 to fix CVE-2019-11324 - Added patches for CVE-2019-11236 (AKA CVE-2019-9740) - Resolves: rhbz#1703361 rhbz#1706026 - Remove the Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1590400 - Allow build with Python 2 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139410 - Security fix for CVE-2024-37891 Resolves: RHEL-45334 - Security fix for CVE-2023-45803 Resolves: RHEL-16872 - Security fix for CVE-2023-43804 Resolves: RHEL-11992 - Security fix for CVE-2020-26137 Resolves: rhbz#1883889 - Update RECENT_DATE dynamically Resolves: rhbz#1761380 - Enable TLS 1.3 post-handshake authentication - Adjust RECENT_DATE variable according to rules Resolves: rhbz#1726743 - Rebuilding after gating was enabled - Resolves: rhbz#1703361 rhbz#1706026 - Rebased to 1.24.2 to fix CVE-2019-11324 - Added patches for CVE-2019-11236 (AKA CVE-2019-9740) - Resolves: rhbz#1703361 rhbz#1706026 - Remove the Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1590400 - Remove Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1567166 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Apply upstream fix for EINTR handling in test_vterm test case - Apply upstream fix for test_remove_watch_file flakiness - Apply upstream fix for test_vterm handling of NUL characters - Update to upstream bugfix release 1.3.1 See http://urwid.org/changelog.html#urwid-1-3-1 - Python 2 binary package renamed to python2-urwid See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild for Python 3.6 - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Use secure random session identifiers in web display (CVE-2026-9323) - Resolves: RHEL-212562 - Remove Python 2 subpackage https://bugzilla.redhat.com/show_bug.cgi?id=1567166 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Apply upstream fix for EINTR handling in test_vterm test case - Apply upstream fix for test_remove_watch_file flakiness - Apply upstream fix for test_vterm handling of NUL characters - Update to upstream bugfix release 1.3.1 See http://urwid.org/changelog.html#urwid-1-3-1 - Python 2 binary package renamed to python2-urwid See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuild for Python 3.6 - python-varlink-22 - python-varlink 23 - python-varlink 25 - python-varlink 26 - python-varlink 26.0.2 - python-varlink 26.1.0 - python-varlink-27.0.0-1 + python-varlink-27.1.0-1 - add "varlink.cli bridge" support - python-varlink-27.1.1-1 - fixed varlink.cli bridge - fixed grammar for interface and field names - Resolves: rhbz#1638237 - updated to 2.4.0 (#2160082) - Resolves: #2160082 - updated to 2.3.2 (#2110411) - Resolves: #2110411 - updated to 2.3.1 (#2044214) - Add Support for new IBM Z Hardware (#2044215) - Resolves: #2044214 #2044215 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - updated to 2.3.0 (#1869549) - Resolves: #1869549 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - updated to 2.2.1 - fix linking - updated to 2.2.0 - updated to 2.4.0 (#2160082) - Resolves: #2160082 - updated to 2.3.2 (#2110411) - Resolves: #2110411 - updated to 2.3.1 (#2044214) - Add Support for new IBM Z Hardware (#2044215) - Resolves: #2044214 #2044215 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - updated to 2.3.0 (#1869549) - Resolves: #1869549 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - updated to 2.2.1 - fix linking - updated to 2.2.0 - Rebuild with binutils > 2.30-99 (bug #1954446) - Add support for HPE XFS (bug #1945408) - Support setting individual grace times for XFS (bug #1898549) - Require libtirpc-devel by quota-devel because of rpc/rpc.h (bug #1868671) - Fix file descriptor leaks in error code paths (bug #1602674) - Distinguish between none quota limits and no allocated resources in quota(1) tool output - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Fix current block usage limit in RPC client - Fix busy loop in rpc.rquotad (bug #1575956) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Fix busy loop in rpc.rquotad (bug #1575956) - Fix current block usage limit in RPC client - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Distinguish between none quota limits and no allocated resources in quota(1) tool output - Fix file descriptor leaks in error code paths (bug #1602674) - Require libtirpc-devel by quota-devel because of rpc/rpc.h (bug #1868671) - Support setting individual grace times for XFS (bug #1898549) - Add support for HPE XFS (bug #1945408) - Rebuild with binutils > 2.30-99 (bug #1954446) - Rebuild with binutils > 2.30-99 (bug #1954446) - Add support for HPE XFS (bug #1945408) - Support setting individual grace times for XFS (bug #1898549) - Require libtirpc-devel by quota-devel because of rpc/rpc.h (bug #1868671) - Fix file descriptor leaks in error code paths (bug #1602674) - Distinguish between none quota limits and no allocated resources in quota(1) tool output - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Fix current block usage limit in RPC client - Fix busy loop in rpc.rquotad (bug #1575956) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Fix busy loop in rpc.rquotad (bug #1575956) - Fix current block usage limit in RPC client - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Distinguish between none quota limits and no allocated resources in quota(1) tool output - Fix file descriptor leaks in error code paths (bug #1602674) - Require libtirpc-devel by quota-devel because of rpc/rpc.h (bug #1868671) - Support setting individual grace times for XFS (bug #1898549) - Add support for HPE XFS (bug #1945408) - Rebuild with binutils > 2.30-99 (bug #1954446) - Rebuild with binutils > 2.30-99 (bug #1954446) - Add support for HPE XFS (bug #1945408) - Support setting individual grace times for XFS (bug #1898549) - Require libtirpc-devel by quota-devel because of rpc/rpc.h (bug #1868671) - Fix file descriptor leaks in error code paths (bug #1602674) - Distinguish between none quota limits and no allocated resources in quota(1) tool output - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Fix current block usage limit in RPC client - Fix busy loop in rpc.rquotad (bug #1575956) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuild with binutils > 2.30-99 (bug #1954446) - Add support for HPE XFS (bug #1945408) - Support setting individual grace times for XFS (bug #1898549) - Require libtirpc-devel by quota-devel because of rpc/rpc.h (bug #1868671) - Fix file descriptor leaks in error code paths (bug #1602674) - Distinguish between none quota limits and no allocated resources in quota(1) tool output - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Fix current block usage limit in RPC client - Fix busy loop in rpc.rquotad (bug #1575956) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Move USAGE to %license as it describes usage in a licensing context - Update to readline-7.0 patchlevel 3 Resolves: #1547804 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - fix requires in static subpkg - Update to readline-7.0 patchlevel 1 - Rebuild for readline 7.x - Rebase to Readline-7.0 Resolves: #1376611 - Move USAGE to %license as it describes usage in a licensing context - Update to readline-7.0 patchlevel 3 Resolves: #1547804 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - fix requires in static subpkg - Update to readline-7.0 patchlevel 1 - Rebuild for readline 7.x - Rebase to Readline-7.0 Resolves: #1376611 - ci: Update `.packit.yml` to run on `c8s` - ci: Use Differential ShellCheck action - ifup-routes: Revert quotes - ifup-routes: Use `ip replace` only on type `route` - ci: introduce GA ci from master to rhel8-branch - ci: Setup packit for RHEL8 branch - ci: Get rid of old ci files (travis and zanata) - rename_device: also support dracut-style kernel cmdline configuration - ifup-routes: Log when using `ip $type replace` - ifup-routes: Use `ip route repace` to avoid race - doc: Document ARPING_WAIT and ARPING_UPDATE_WAIT - network scripts: Avoid infinite loop of arping - network: fix condition in set_link_up() - doc: Documents ifcfg option LINKSTATUS - network: fix set_link_up() - network: add option to keep the link down - makefile: Use rpmdev-bumpspec's legacy date option - Allow updating rfkill switch status while in readonly root mode - service: Prevent variables from globbing - Allow updating mlocate.db while in readonly root mode - Add optional 'dev' keyword - man: add ifdown.8 - ci: Update `.packit.yml` to run on `c8s` - ci: Use Differential ShellCheck action - ifup-routes: Revert quotes - ifup-routes: Use `ip replace` only on type `route` - ci: introduce GA ci from master to rhel8-branch - ci: Setup packit for RHEL8 branch - ci: Get rid of old ci files (travis and zanata) - rename_device: also support dracut-style kernel cmdline configuration - ifup-routes: Log when using `ip $type replace` - ifup-routes: Use `ip route repace` to avoid race - doc: Document ARPING_WAIT and ARPING_UPDATE_WAIT - network scripts: Avoid infinite loop of arping - network: fix condition in set_link_up() - doc: Documents ifcfg option LINKSTATUS - network: fix set_link_up() - network: add option to keep the link down - makefile: Use rpmdev-bumpspec's legacy date option - Allow updating rfkill switch status while in readonly root mode - service: Prevent variables from globbing - Allow updating mlocate.db while in readonly root mode - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - migrated to SPDX license - allow multiple names and _srv_ ad_server option Resolves: RHEL-12113 - fix ccache handling for leave operation Resolves: RHEL-26166 - Update to upstream release 0.17.1 Resolves: rhbz#2133841 - add LDAP socket timeout Resolves: rhbz#2037864 - Avoid duplicated log messages and use Samba's new CLI options Resolves: rhbz#2024248 Resolves: rhbz#2028528 - Add restart macro and vendor message to spec file Resolves: rhbz#1926046 - Add fixes LDAPS functionality Resolves: rhbz#1826964 - Add missing patch for LDAPS functionality Resolves: rhbz#1826964 - realmd should handle default_realm in krb5.conf Resolves: rhbz#1791016 - [RFE] Enable LDAPS functionality in realmd join Resolves: rhbz#1826964 - Realm join fails with error 'Failed to join domain: failed to lookup DC info ...' Resolves: rhbz#1859503 - realm command to use option like dnshostname=fqdn Resolves: rhbz#1867912 - Fix kerberos method Resolves: rhbz#1801195 - Fix segfault on restore default acl (rhbz#1567836) - Use standard Fedora linker flags (bug #1548670) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Build properly on MIPS - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - fix segfault for pax -X (#1175009) - Update rng-tools to v6.16 @ 0e560296 (bz 2174908) - Get rid of text relocations in -fPIE build - Add a hint for opensc package (bz 1845854) - Update rng-tools to v6.15 @ cb8cc624 (bz 2141379) - Update jitterentropy library to v3.4.1 @ 7bf9f85d - Fix a stack corruption on s390x - Fix a number of issues found by covscan code scanner - Add a jitter init timeout for tests - Add a start condition for the FIPS mode (bz 2154804) - Update rng-tools to v6.15 @ 6dcc9ec2 (bz 2124602) - Update jitterentropy library to v3.4.1 @ 4544e113 - Do not require selinux-policy if it is not present - Update rng-tools to v6.15 @ 172bf0e3 (bz 2075974) - Update jitterentropy library to v3.4.0 @ 887c9871 - Allow rngd process to drop privileges with "-D user:group" - Fix an error building with jitterentropy-3.4.0 - Add a requirement for selinux-policy of a certain version - Fix a build failure on ppc64 - Small edits in test scripts - Update rng-tools to v6.14 @ b2b7934e (bz 2015570) - Update jitterentropy library to v3.3.1 @ 887c9871 - Add a config file for storing rngd options - Fix a security issue found by a covscan in jitterentropy library - Update to the upstream v6.13 + tip of origin/master + onecpu branch + revert of 2ce93190 - Rebuild rng-tools against the latest jitterentropy library 3.0.2-2.git.409828cf with fixes for an important issue - Fix a number of issues (bz 1974103, bz 1980421, bz 1859154) - Adjust rngd-wake-threshold.service and post section so udevadm is not run in a container (bz 1975554) - Fix /dev/hwrng permissions issue at boot time (bz 1955522) - There is no need to hardcode _sbindir anymore, also the old value is incorrect - Update the rngd.service file - Fix a busyloop bug (bz 1956248) - Fix /dev/hwrng permission issue (bz 1955522) - Fix coarse clock time on Azure (bz 180155) - Fix systemd unit symlink for LEAPP upgrades (RHEL-161093) - Update rng-tools to v6.16 @ 0e560296 (bz 2174908) - Get rid of text relocations in -fPIE build - Add a hint for opensc package (bz 1845854) - Update rng-tools to v6.15 @ cb8cc624 (bz 2141379) - Update jitterentropy library to v3.4.1 @ 7bf9f85d - Fix a stack corruption on s390x - Fix a number of issues found by covscan code scanner - Add a jitter init timeout for tests - Add a start condition for the FIPS mode (bz 2154804) - Update rng-tools to v6.15 @ 6dcc9ec2 (bz 2124602) - Update jitterentropy library to v3.4.1 @ 4544e113 - Do not require selinux-policy if it is not present - Update rng-tools to v6.15 @ 172bf0e3 (bz 2075974) - Update jitterentropy library to v3.4.0 @ 887c9871 - Allow rngd process to drop privileges with "-D user:group" - Fix an error building with jitterentropy-3.4.0 - Add a requirement for selinux-policy of a certain version - Fix a build failure on ppc64 - Small edits in test scripts - Update rng-tools to v6.14 @ b2b7934e (bz 2015570) - Update jitterentropy library to v3.3.1 @ 887c9871 - Add a config file for storing rngd options - Fix a security issue found by a covscan in jitterentropy library - Update to the upstream v6.13 + tip of origin/master + onecpu branch + revert of 2ce93190 - Rebuild rng-tools against the latest jitterentropy library 3.0.2-2.git.409828cf with fixes for an important issue - Fix a number of issues (bz 1974103, bz 1980421, bz 1859154) - Adjust rngd-wake-threshold.service and post section so udevadm is not run in a container (bz 1975554) - Fix /dev/hwrng permissions issue at boot time (bz 1955522) - There is no need to hardcode _sbindir anymore, also the old value is incorrect - Update the rngd.service file - Fix a busyloop bug (bz 1956248) - Fix /dev/hwrng permission issue (bz 1955522) - copy content of /etc/skel directory for root as posstrans, don't overwrite existing files (#999114) - fix the posttrans copying (thanks O.Poplawski) - fix the posttrans scriptlet to not change the /root permissions (#1037688) - actually --no-preserve doesn't work for this case... - changing to --preserve - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - rpcbind: fix double free in init_transport (bz 2115209) - network_init: initialize response addrinfo list to NULL (bz 1959003) - security: dowgrade priority for non-libwrap CALLIT logging (bz 1897122) - Clean up a error path found by a covscan (bz 1602680) - Use sysconfig variable in service file (bz 1764985) - Removed some issues found by covscan (bz 1602680) - Enable gating using reverse dependency testing of nfs-utils (bz 1681967 - Update the URL (bz 1638664) - Make sure policycoreutils is installed before using it (bz 1628901) - Fixed stack buffer overflow in rpcinfo (bz 1637565) - Make sure /var/lib/rpcbind exists (bz 1628901) - CVE-2026-94640 rpcbind: Unbounded memory allocation in rpcbind statistics tracking allows unauthenticated remote denial of service statistics tracking allows unauthenticated remote denial of service Resolves: RHEL-266668 - rpcbind: fix double free in init_transport (bz 2115209) - network_init: initialize response addrinfo list to NULL (bz 1959003) - security: dowgrade priority for non-libwrap CALLIT logging (bz 1897122) - Clean up a error path found by a covscan (bz 1602680) - Use sysconfig variable in service file (bz 1764985) - Removed some issues found by covscan (bz 1602680) - Enable gating using reverse dependency testing of nfs-utils (bz 1681967 - Update the URL (bz 1638664) - Make sure policycoreutils is installed before using it (bz 1628901) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Address important covscan issues (#1996665), vol. 2 - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069) - Fix IMA signature lengths assumed constant (RHEL-39896) - Fix root relocation regression (RHEL-49494) - Report unsafe symlinks during installation as a specific case (RHEL-39897) - Don't segfault on missing priority tag (RHEL-39894) - Backport file handling code from rpm-4.19 to fix CVE-2021-35937, CVE-2021-35938 and CVE-2021-35939 - Make brp-python-bytecompile script compatible with Python 3.10+ Resolves: RHEL-6423 - Add --nocompression to rpm2archive (#2129345) - Make write() nonblocking in fapolicyd plugin (#2110787) - Fix minor ABI regression in rpmcli.h (#1940895) - Fix spurious %transfiletriggerpostun execution (#2023693) - Skip recorded symlinks in --setperms (#1900662) - Address covscan issues in binding sigs validation patch (#1958480) - Add --path query option (#1940895) - Macroize find-debuginfo script location (#2019540) - Validate and require subkey binding sigs on PGP pubkeys (#1958480) - Fixes CVE-2021-3521 - Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291) - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering - Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs - Related: #1907443 - Adding fmf plans to run tests with tmt - Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes - Resolves: #1816528 - Defaults for --skip-compress are not working, everything is being compressed - Resolves: #1855981 - rsync segfaults in --append mode - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering - Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs - Related: #1907443 - Adding fmf plans to run tests with tmt - Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes - Resolves: #1816528 - Defaults for --skip-compress are not working, everything is being compressed - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering - Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs - Related: #1907443 - Adding fmf plans to run tests with tmt - Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering - Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs - Resolves: RHEL-152887 - CVE-2025-10158 - Out of bounds array access via negative index - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering - Resolves: RHEL-169141 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-152887 - CVE-2025-10158 - Out of bounds array access via negative index - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174951 - Resolves: RHEL-174950 - CVE-2026-29518 - TOCTOU symlink race in non-chrooted daemon modules - Resolves: RHEL-169141 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-152887 - CVE-2025-10158 - Out of bounds array access via negative index - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: RHEL-256903 - Fix latest CVEs in rsync in RHEL8 - Fixing a regression introduced with the security patches - Integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174951 - Resolves: RHEL-174950 - CVE-2026-29518 - TOCTOU symlink race in non-chrooted daemon modules - Resolves: RHEL-169141 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-152887 - CVE-2025-10158 - Out of bounds array access via negative index - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering - Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs - Related: #1907443 - Adding fmf plans to run tests with tmt - Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes - Resolves: #1816528 - Defaults for --skip-compress are not working, everything is being compressed - Resolves: #1855981 - rsync segfaults in --append mode - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering - Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs - Related: #1907443 - Adding fmf plans to run tests with tmt - Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes - Resolves: #1816528 - Defaults for --skip-compress are not working, everything is being compressed - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering - Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs - Related: #1907443 - Adding fmf plans to run tests with tmt - Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering - Resolves: #2071513 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs - Resolves: RHEL-152887 - CVE-2025-10158 - Out of bounds array access via negative index - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Resolves: #2043753 - [RFE] Improve defaults for sparse file buffering - Resolves: RHEL-169141 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-152887 - CVE-2025-10158 - Out of bounds array access via negative index - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: #2111175 - remote arbitrary files write inside the directories of connecting peers - Related: #2043753 - New option should not be sent to the server every time - Integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174951 - Resolves: RHEL-174950 - CVE-2026-29518 - TOCTOU symlink race in non-chrooted daemon modules - Resolves: RHEL-169141 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-152887 - CVE-2025-10158 - Out of bounds array access via negative index - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - Resolves: #2116668 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field - Resolves: RHEL-256903 - Fix latest CVEs in rsync in RHEL8 - Fixing a regression introduced with the security patches - Integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174951 - Resolves: RHEL-174950 - CVE-2026-29518 - TOCTOU symlink race in non-chrooted daemon modules - Resolves: RHEL-169141 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-152887 - CVE-2025-10158 - Out of bounds array access via negative index - Resolves: RHEL-52004 - Slowness in rsync due to extra validation steps - Resolves: RHEL-91519 - Improper Pointer Arithmetic in pcl - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70207 - Path traversal vulnerability in rsync - Resolves: RHEL-70209 - --safe-links option bypass leads to path traversal - Resolves: RHEL-72502 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents - Resolves: #2139118 - rsync-daemon fail on 3.1.3 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10568 - SE: Secure guest tool to bind and associate APQNs (RHEL-10575) - Resolves: RHEL-10575 - rebased to 2.29.0 (RHEL-11409) - KVM: Support AP Bindings in SE Header (RHEL-10573) - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10579) - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11441) - vmur: fix handling of option -t (RHEL-11479) - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16526) - enable multi-arch build (RHEL-10568) - Resolves: RHEL-11409 RHEL-10573 RHEL-10579 RHEL-11441 RHEL-11479 RHEL-16526 RHEL-10568 - zdev/dracut: fix kdump build to integrate with site support (#2229178) - Resolves: #2229178 - Secure Execution APQN binding and IBK association (#2110510) - Resolves: #2110510 - rebuild - Related: #2159698 - rebased to 2.27.0 (#2159698) - lszcrypt fails when querying a specific domain (#2177613) - DASD autoquiesce support (#2196510) - zcrypt DD: AP command filtering (#2170362) - vmconvert and zgetdump consolidation (#2173925) - Support for List-Directed dump from ECKD DASD (#2159694) - Support for List-Directed IPL and re-IPL from ECKD DASD (#2159691) - Resolves: #2159698 #2177613 #2196510 #2170362 #2173925 #2159694 #2159691 - zkey: Support EP11 host library version 4 (#2165811) - Resolves: #2165811 - rebased to 2.25.0 (#2110312) - KVM: Tool to process encrypted Secure Execution guest dumps (#2043851) - zipl: Support for Secure Boot IPL and Dump from ECKD DASD (#2043852) - zdev: Site-aware device configuration (#2043858) - Display Processor Activity Instrumentation CPACF counters (#2111013) - Transparent DASD PPRC (Peer-to-Peer Remote Copy) handling (#2126618) - zipl: Add secure boot trailer (#2142884) - Resolves: #2110312 #2043851 #2043852 #2043858 #2111013 #2126618 #2142884 - zipl: Add missing check for a nullpointer (#2113976) - Resolves: #2113976 - Fix detection 5* kernel - hsci: Automatically set appropriate MTU for HSCI (RHEL-153548) - Resolves: RHEL-153548 - dasdfmt: Change mode default (RHEL-121638) - Resolves: RHEL-121638 - libekmfweb: Fix generation of certificate or CSR with RSA-PSS instead of RSA (RHEL-114130) - Resolves: RHEL-114130 - zkey: Fix CCA host version detection for newer CCA versions (RHEL-105487) - Resolves: RHEL-105487 - SE-tooling: New IBM host-key subject locality (RHEL-30398) - dbginfo.sh: missing data of new ROCE cards (RHEL-24110) - Resolves: RHEL-30398 RHEL-24110 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10568 - SE: Secure guest tool to bind and associate APQNs (RHEL-10575) - Resolves: RHEL-10575 - rebased to 2.29.0 (RHEL-11409) - KVM: Support AP Bindings in SE Header (RHEL-10573) - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10579) - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11441) - vmur: fix handling of option -t (RHEL-11479) - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16526) - enable multi-arch build (RHEL-10568) - Resolves: RHEL-11409 RHEL-10573 RHEL-10579 RHEL-11441 RHEL-11479 RHEL-16526 RHEL-10568 - zdev/dracut: fix kdump build to integrate with site support (#2229178) - Resolves: #2229178 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10568 - SE: Secure guest tool to bind and associate APQNs (RHEL-10575) - Resolves: RHEL-10575 - rebased to 2.29.0 (RHEL-11409) - KVM: Support AP Bindings in SE Header (RHEL-10573) - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10579) - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11441) - vmur: fix handling of option -t (RHEL-11479) - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16526) - enable multi-arch build (RHEL-10568) - Resolves: RHEL-11409 RHEL-10573 RHEL-10579 RHEL-11441 RHEL-11479 RHEL-16526 RHEL-10568 - zdev/dracut: fix kdump build to integrate with site support (#2229178) - Resolves: #2229178 - Secure Execution APQN binding and IBK association (#2110510) - Resolves: #2110510 - rebuild - Related: #2159698 - rebased to 2.27.0 (#2159698) - lszcrypt fails when querying a specific domain (#2177613) - DASD autoquiesce support (#2196510) - zcrypt DD: AP command filtering (#2170362) - vmconvert and zgetdump consolidation (#2173925) - Support for List-Directed dump from ECKD DASD (#2159694) - Support for List-Directed IPL and re-IPL from ECKD DASD (#2159691) - Resolves: #2159698 #2177613 #2196510 #2170362 #2173925 #2159694 #2159691 - zkey: Support EP11 host library version 4 (#2165811) - Resolves: #2165811 - rebased to 2.25.0 (#2110312) - KVM: Tool to process encrypted Secure Execution guest dumps (#2043851) - zipl: Support for Secure Boot IPL and Dump from ECKD DASD (#2043852) - zdev: Site-aware device configuration (#2043858) - Display Processor Activity Instrumentation CPACF counters (#2111013) - Transparent DASD PPRC (Peer-to-Peer Remote Copy) handling (#2126618) - zipl: Add secure boot trailer (#2142884) - Resolves: #2110312 #2043851 #2043852 #2043858 #2111013 #2126618 #2142884 - zipl: Add missing check for a nullpointer (#2113976) - Resolves: #2113976 - Fix detection 5* kernel - hsci: Automatically set appropriate MTU for HSCI (RHEL-153548) - Resolves: RHEL-153548 - dasdfmt: Change mode default (RHEL-121638) - Resolves: RHEL-121638 - libekmfweb: Fix generation of certificate or CSR with RSA-PSS instead of RSA (RHEL-114130) - Resolves: RHEL-114130 - zkey: Fix CCA host version detection for newer CCA versions (RHEL-105487) - Resolves: RHEL-105487 - SE-tooling: New IBM host-key subject locality (RHEL-30398) - dbginfo.sh: missing data of new ROCE cards (RHEL-24110) - Resolves: RHEL-30398 RHEL-24110 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10568 - SE: Secure guest tool to bind and associate APQNs (RHEL-10575) - Resolves: RHEL-10575 - rebased to 2.29.0 (RHEL-11409) - KVM: Support AP Bindings in SE Header (RHEL-10573) - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10579) - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11441) - vmur: fix handling of option -t (RHEL-11479) - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16526) - enable multi-arch build (RHEL-10568) - Resolves: RHEL-11409 RHEL-10573 RHEL-10579 RHEL-11441 RHEL-11479 RHEL-16526 RHEL-10568 - zdev/dracut: fix kdump build to integrate with site support (#2229178) - Resolves: #2229178 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10568 - SE: Secure guest tool to bind and associate APQNs (RHEL-10575) - Resolves: RHEL-10575 - rebased to 2.29.0 (RHEL-11409) - KVM: Support AP Bindings in SE Header (RHEL-10573) - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10579) - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11441) - vmur: fix handling of option -t (RHEL-11479) - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16526) - enable multi-arch build (RHEL-10568) - Resolves: RHEL-11409 RHEL-10573 RHEL-10579 RHEL-11441 RHEL-11479 RHEL-16526 RHEL-10568 - zdev/dracut: fix kdump build to integrate with site support (#2229178) - Resolves: #2229178 - Secure Execution APQN binding and IBK association (#2110510) - Resolves: #2110510 - rebuild - Related: #2159698 - rebased to 2.27.0 (#2159698) - lszcrypt fails when querying a specific domain (#2177613) - DASD autoquiesce support (#2196510) - zcrypt DD: AP command filtering (#2170362) - vmconvert and zgetdump consolidation (#2173925) - Support for List-Directed dump from ECKD DASD (#2159694) - Support for List-Directed IPL and re-IPL from ECKD DASD (#2159691) - Resolves: #2159698 #2177613 #2196510 #2170362 #2173925 #2159694 #2159691 - zkey: Support EP11 host library version 4 (#2165811) - Resolves: #2165811 - rebased to 2.25.0 (#2110312) - KVM: Tool to process encrypted Secure Execution guest dumps (#2043851) - zipl: Support for Secure Boot IPL and Dump from ECKD DASD (#2043852) - zdev: Site-aware device configuration (#2043858) - Display Processor Activity Instrumentation CPACF counters (#2111013) - Transparent DASD PPRC (Peer-to-Peer Remote Copy) handling (#2126618) - zipl: Add secure boot trailer (#2142884) - Resolves: #2110312 #2043851 #2043852 #2043858 #2111013 #2126618 #2142884 - zipl: Add missing check for a nullpointer (#2113976) - Resolves: #2113976 - Fix detection 5* kernel - hsci: Automatically set appropriate MTU for HSCI (RHEL-153548) - Resolves: RHEL-153548 - dasdfmt: Change mode default (RHEL-121638) - Resolves: RHEL-121638 - libekmfweb: Fix generation of certificate or CSR with RSA-PSS instead of RSA (RHEL-114130) - Resolves: RHEL-114130 - zkey: Fix CCA host version detection for newer CCA versions (RHEL-105487) - Resolves: RHEL-105487 - SE-tooling: New IBM host-key subject locality (RHEL-30398) - dbginfo.sh: missing data of new ROCE cards (RHEL-24110) - Resolves: RHEL-30398 RHEL-24110 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10568 - SE: Secure guest tool to bind and associate APQNs (RHEL-10575) - Resolves: RHEL-10575 - rebased to 2.29.0 (RHEL-11409) - KVM: Support AP Bindings in SE Header (RHEL-10573) - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10579) - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11441) - vmur: fix handling of option -t (RHEL-11479) - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16526) - enable multi-arch build (RHEL-10568) - Resolves: RHEL-11409 RHEL-10573 RHEL-10579 RHEL-11441 RHEL-11479 RHEL-16526 RHEL-10568 - zdev/dracut: fix kdump build to integrate with site support (#2229178) - Resolves: #2229178 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-178261 - Fix winbind mkhomedir ownership handling - resolves: RHEL-156322 - Fix CVE-2026-3012 - resolves: RHEL-161647 - Fix CVE-2026-4480 - resolves: RHEL-177933 - Fix CVE-2026-4408 - resolves: RHEL-166866 - Build hardening, stack protection with FORTIFY_SOURCE - resolves: RHEL-132396 - Fix deadlock between two smbd processes - resolves: RHEL-144390 - Fix winbind group resolution - resolves: RHEL-131616 - Fix regression with relative symlinks in a share - resolves: RHEL-119843 - Fix stale sharemode entries which can cause deadlocks - resolves: RHEL-115067 - Fix regression with symlinks inside shares - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes` - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-16483 - Update to version 4.19.2 - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - resolves: RHEL-16483 - Update to version 4.19.3 - resolves: RHEL-11361 - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 - resolves: RHEL-2228 - Logging Format Enhancement - resolves: RHEL-1965 - Fix smbget issues with DFS shares - resolves: RHEL-2108 - Fix force user/group issues with 'allow trusted domains = yes' - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-17283 - Fix smbget password interactive authentication - Fix DC discovery after Windows netlogon hardening - resolves: RHEL-101902 - resolves: RHEL-87030 - Fix winbind memory leak - resolves: RHEL-84117 - fd_handle_destructor() can panic within an smbd_smb2_close() - resolves: RHEL-63770 - Fix notifyd performance issue - resolves: RHEL-45842 - Fix idmap_ad with trusted domains - related: RHEL-33813 - Undo wrong changes in rpminspect.yaml - resolves: RHEL-33813 - Add option to request only POSIX groups from AD in idmap_ad - resolves: RHEL-19753 - Fix smbget interactive authentication - Fix error in PREIN scriptlet in rpm package samba-common - related: RHEL-16483 - Update to version 4.19.4 - resolves: RHEL-16483 - Update to version 4.19.4 - Minor cleanup - remove unused patch from the spec file too (related to 4.5-3) - Resolves: rhbz#1869253 - Skip selinux test when selinux is not working - Resolves: rhbz#1905777 - Minor cleanup - remove unused patch from the git - Resolves: rhbz#1869253 - fix "in-place edits on FUSE filesystems create files with all-zero mode bits" - Resolves: #1835761 - Rebase to 4.5 - Drop patch from 4.4-4 (is included in the upstream archive) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - When editing file inplace, the SELinux context should be based on the link instead of the target file itself. --follow-symlinks option remains unchanged - Resolves: #1401442 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - new version 4.4 - removed COPYING.DOC license which is no longer in upstream - Resolves: #1410093 - lib/dfa.c: Increase the maximum size of the transitions table - After changes introduced between sed 4.2 and 4.4, some regexps started to hit the table size limits. This lead to repeated deletion and rebuilding of the table, leading to massive performance drops. While the core issue is still present, this change should at least help by moving the threshold of the regexp complexity that triggers the table rebuilds. - Resolves: RHEL-17133 - Minor cleanup - remove unused patch from the spec file too (related to 4.5-3) - Resolves: rhbz#1869253 - Skip selinux test when selinux is not working - Resolves: rhbz#1905777 - Minor cleanup - remove unused patch from the git - Resolves: rhbz#1869253 - fix "in-place edits on FUSE filesystems create files with all-zero mode bits" - Resolves: #1835761 - Rebase to 4.5 - Drop patch from 4.4-4 (is included in the upstream archive) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - When editing file inplace, the SELinux context should be based on the link instead of the target file itself. --follow-symlinks option remains unchanged - Resolves: #1401442 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label /etc/redis.conf with redis_conf_t Resolves: RHEL-95750 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148243 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label msmtp and msmtpd with sendmail_exec_t Resolves: RHEL-1678 - Set default file context of HOME_DIR/tmp/.* to <<none>> Resolves: RHEL-1099 - Improve default file context(None) of /var/lib/authselect/backups Resolves: RHEL-3539 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label /etc/redis.conf with redis_conf_t Resolves: RHEL-95750 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148243 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label msmtp and msmtpd with sendmail_exec_t Resolves: RHEL-1678 - Set default file context of HOME_DIR/tmp/.* to <<none>> Resolves: RHEL-1099 - Improve default file context(None) of /var/lib/authselect/backups Resolves: RHEL-3539 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label /etc/redis.conf with redis_conf_t Resolves: RHEL-95750 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148243 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label msmtp and msmtpd with sendmail_exec_t Resolves: RHEL-1678 - Set default file context of HOME_DIR/tmp/.* to <<none>> Resolves: RHEL-1099 - Improve default file context(None) of /var/lib/authselect/backups Resolves: RHEL-3539 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label /etc/redis.conf with redis_conf_t Resolves: RHEL-95750 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148243 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label msmtp and msmtpd with sendmail_exec_t Resolves: RHEL-1678 - Set default file context of HOME_DIR/tmp/.* to <<none>> Resolves: RHEL-1099 - Improve default file context(None) of /var/lib/authselect/backups Resolves: RHEL-3539 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label /etc/redis.conf with redis_conf_t Resolves: RHEL-95750 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148243 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label msmtp and msmtpd with sendmail_exec_t Resolves: RHEL-1678 - Set default file context of HOME_DIR/tmp/.* to <<none>> Resolves: RHEL-1099 - Improve default file context(None) of /var/lib/authselect/backups Resolves: RHEL-3539 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label /etc/redis.conf with redis_conf_t Resolves: RHEL-95750 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148243 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label msmtp and msmtpd with sendmail_exec_t Resolves: RHEL-1678 - Set default file context of HOME_DIR/tmp/.* to <<none>> Resolves: RHEL-1099 - Improve default file context(None) of /var/lib/authselect/backups Resolves: RHEL-3539 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label /etc/redis.conf with redis_conf_t Resolves: RHEL-95750 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148243 - Allow setsebool_t relabel selinux data files Resolves: RHEL-55432 - Allow dirsrv-snmp map dirsv_tmpfs_t files Resolves: RHEL-32441 - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files Resolves: RHEL-32441 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Allow wdmd read hardware state information Resolves: RHEL-27507 - Allow wdmd list the contents of the sysfs directories Resolves: RHEL-27507 - Allow linuxptp configure phc2sys and chronyd over a unix domain socket Resolves: RHEL-27394 - Differentiate between staff and sysadm when executing crontab with sudo Resolves: RHEL-1388 - Allow su domains write login records Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves: RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow gpg manage rpm cache Resolves: RHEL-11249 - Transition from sudodomains to crontab_t when executing crontab_exec_t Resolves: RHEL-1388 - Fix label of pseudoterminals created from sudodomain Resolves: RHEL-1388 - Allow login_userdomain to manage session_dbusd_tmp_t dirs/files Resolves: RHEL-22500 - Label /dev/ngXnY and /dev/nvme-subsysX with nvme_device_t Resolves: RHEL-23442 - Allow admin user read/write on fixed_disk_device_t Resolves: RHEL-23434 - Only allow confined user domains to login locally without unconfined_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_confined_admin_users interface Resolves: RHEL-1628 - Only allow admindomain to execute shell via ssh with ssh_sysadm_login Resolves: RHEL-1628 - Add userdom_spec_domtrans_admin_users interface Resolves: RHEL-1628 - Move ssh dyntrans to unconfined inside unconfined_login tunable policy Resolves: RHEL-1628 - Allow utempter_t use ptmx Resolves: RHEL-25002 - Dontaudit subscription manager setfscreate and read file contexts Resolves: RHEL-21639 - Don't audit crontab_domain write attempts to user home Resolves: RHEL-1388 - Add crontab_domtrans interface Resolves: RHEL-1388 - Add dbus_manage_session_tmp_files interface Resolves: RHEL-22500 - Allow httpd read network sysctls Resolves: RHEL-22748 - Allow keepalived_unconfined_script_t dbus chat with init Resolves: RHEL-22843 - Label /tmp/libdnf.* with user_tmp_t Resolves: RHEL-11249 - Allow su domains write login records Resolves: RHEL-2606 - Allow gpg read rpm cache Resolves: RHEL-11249 - Allow unix dgram sendto between exim processes Resolves: RHEL-21903 - Allow hypervkvp_t write access to NetworkManager_etc_rw_t Resolves: RHEL-17687 - Add interface for write-only access to NetworkManager rw conf Resolves: RHEL-17687 - Allow conntrackd_t to use sys_admin capability Resolves: RHEL-22276 - Allow syslog to run unconfined scripts conditionally Resolves: RHEL-10087 - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t Resolves: RHEL-10087 - Allow collectd connect to statsd port Resolves: RHEL-19482 - Allow collectd_t read network state symlinks Resolves: RHEL-19482 - Allow collectd_t domain to create netlink_generic_socket sockets Resolves: RHEL-19482 - Allow opafm search nfs directories Resolves: RHEL-19426 - Allow mdadm list stratisd data directories Resolves: RHEL-21374 - Label /dev/acpi_thermal_rel char device with acpi_device_t Resolves: RHEL-18027 - Allow sysadm execute traceroute in sysadm_t domain using sudo Resolves: RHEL-9947 - Allow sysadm execute tcpdump in sysadm_t domain using sudo Resolves: RHEL-15398 - Add support for syslogd unconfined scripts Resolves: RHEL-10087 - Label /dev/wmi/dell-smbios as acpi_device_t Resolves: RHEL-18027 - Make named_zone_t and named_var_run_t a part of the mountpoint attribute Resolves: RHEL-1954 - Dontaudit rhsmcertd write memory device Resolves: RHEL-17721 - Allow sudodomain read var auth files Resolves: RHEL-16567 - Update cifs interfaces to include fs_search_auto_mountpoints() Resolves: RHEL-14072 - Allow systemd-localed create Xserver config dirs Resolves: RHEL-16715 - Label /var/run/auditd.state as auditd_var_run_t Resolves: RHEL-14376 - Allow auditd read all domains process state Resolves: RHEL-14471 - Allow sudo userdomain to run rpm related commands Resolves: RHEL-1679 - Remove insights_client_watch_lib_dirs() interface Resolves: RHEL-16185 - Additional permissions for ip-vrf Resolves: RHEL-9981 - Allow ip an explicit domain transition to other domains Resolves: RHEL-9981 - Allow winbind_rpcd_t processes access when samba_export_all_* is on Resolves: RHEL-5845 - Allow system_mail_t manage exim spool files and dirs Resolves: RHEL-14186 - Label msmtp and msmtpd with sendmail_exec_t Resolves: RHEL-1678 - Set default file context of HOME_DIR/tmp/.* to <<none>> Resolves: RHEL-1099 - Improve default file context(None) of /var/lib/authselect/backups Resolves: RHEL-3539 - Disable/remove neverallow options in sediff (#2184141) - Disable/remove neverallow options in frontends (#2184141) - AVRuleXperm: Fix permission set creation for AVTAB_XPERMS_IOCTLDRIVER (#2174376) - Make seinfo output predictable (#2019961) - Support old boolean names in policy queries (#1595572, #1581848) - SETools 4.3.0 release (#1820079) - Revised sediff method for TE rules. This drastically reduced memory and run time. - Added infiniband context support to seinfo, sediff, and apol. - Added apol configuration for location of Qt assistant. - Fixed sediff issue where properties header would display when not requested. - Fixed sediff issue with type_transition file name comparison. - Fixed permission map socket sendto information flow direction. - Added methods to TypeAttribute class to make it a complete Python collection. - Genfscon now will look up classes rather than using fixed values which were dropped from libsepol. - setools requires -console, -console-analyses and -gui packages (#1820078) - Build setools-console-analyses and setools-gui (#1731519) - SETools 4.2.2 release - Use CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CFLAGS ; CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection}" ; export CXXFLAGS ; FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -march=z13 -mtune=z14 -fasynchronous-unwind-tables -fstack-clash-protection - SELinuxPolicy: Create a map of aliases on policy load (#1672631) - SETools 4.2.1 release (#1581761, #1595582) - Add missing %patch macro - Don't set LANG as a per-shell variable (#2029787) - Move /var/log/lastlog ownership to systemd (#2044589) - tcsh sets variable p to /usr/sbin from /etc/csh.login (#1945400) - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#1917934) - make setup protected package (#1755997) - rebuilt to fix version - add pcp user to /etc/aliases (#1744089) - set PATH if it is empty in csh.login (#1744104) - lang.csh: prevent grep from failing so scripts do not end prematurely when tcsh -e option in use (#1678706) - use full path for non-builtins (#1688302) - add nrpe tcp port 5666 to /etc/services (#1730396) - fix lang.csh script so .cshrc gets read again (#1755360) - do not ship /etc/hosts.allow and /etc/hosts.deny (no need for them as we don't allow tcp_wrappers in RHEL8, #1663556) - fix lang.csh script so it doesn't break tcsh -e scripts (#1620004) - fix cut&paste error in lang.csh script (#1598268) - Fix sg_ses --page argument override when --control and --data are specified (#2078107) - Reorder the udev rules to run after 60-persistent-storage.rules (RHBZ #1785062) - Enable supplemental udev rules by default (RHBZ #1746414) - Fix sg_turs help invocation in an old mode (#1683343) - Fix sg_raw printing error about device not specified on version request (#1627657) - Fix coverity scan warninings (RHBZ#1633235) - Upgrade to 1.44. (RHBZ#1631347) - Upgrade to 1.43 beta r785. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - sg_inq output conformance for SCSI name string and ATA fields (RHEL-188162) - Fix sg_ses --page argument override when --control and --data are specified (#2078107) - Reorder the udev rules to run after 60-persistent-storage.rules (RHBZ #1785062) - Enable supplemental udev rules by default (RHBZ #1746414) - Fix sg_turs help invocation in an old mode (#1683343) - Fix sg_raw printing error about device not specified on version request (#1627657) - Fix coverity scan warninings (RHBZ#1633235) - Upgrade to 1.44. (RHBZ#1631347) - Upgrade to 1.43 beta r785. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Fix sg_ses --page argument override when --control and --data are specified (#2078107) - Reorder the udev rules to run after 60-persistent-storage.rules (RHBZ #1785062) - Enable supplemental udev rules by default (RHBZ #1746414) - Fix sg_turs help invocation in an old mode (#1683343) - Fix sg_raw printing error about device not specified on version request (#1627657) - Fix coverity scan warninings (RHBZ#1633235) - Upgrade to 1.44. (RHBZ#1631347) - Upgrade to 1.43 beta r785. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - sg_inq output conformance for SCSI name string and ATA fields (RHEL-188162) - Fix sg_ses --page argument override when --control and --data are specified (#2078107) - Reorder the udev rules to run after 60-persistent-storage.rules (RHBZ #1785062) - Enable supplemental udev rules by default (RHBZ #1746414) - Fix sg_turs help invocation in an old mode (#1683343) - Fix sg_raw printing error about device not specified on version request (#1627657) - Fix coverity scan warninings (RHBZ#1633235) - Upgrade to 1.44. (RHBZ#1631347) - Upgrade to 1.43 beta r785. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - add /etc/sgml ownership to xml-common subpackage (#1173925) - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Use /usr/bin instead of /bin in Requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Package and catalog xmldsig-core-schema.xsd, XMLSchema.dtd, and datatypes.dtd - add basic manpages for sgml.conf(5) and sgmlwhich(1) (#1613279) - rebuild for updated gating.yaml - fix buffer overflow with high port numbers (RHEL-11034) - use distribution LDFLAGS during build (#1548559) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - salt: remove rounds from salt string. Resolves: RHEL-16668 - login.defs: include SHA_CRYPT_MAX_ROUNDS. Resolves: RHEL-15024 - gpasswd: fix password leak. Resolves: #2215947 - Update patch to close label to reset libselinux state. Resolves: #1984740 - useradd: check if subid range exists for user. Resolves: #2012929 - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #1994269 - subordinateio: also compare the owner ID. Resolves: #2093311 - Fix release sources - Add subid requirement for subid-devel - getsubids: provide system binary and man page. Resolves: #2013016 - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782 - Creation of subid and subid-devel subpackages (#2013009) - libsubid: creation and nsswitch support - libsubid: don't print error messages on stderr by default - libsubid: libsubid_init return false if out of memory - libsubid: don't return owner in list_owner_ranges API call - libsubid: libsubid_init don't print messages on error - libsubid: fix newusers when nss provides subids - libsubid: make shadow_logfd not extern - useradd: fix SUB_UID_COUNT=0 - man: mention NSS in new[ug]idmap manpages - man: clarify subid delegation - usermod: allow all group types with -G option (#1967641) - man: Remove references to LOGIN_STRING in login.defs (#1884702) - lib/sssd: redirect warning message to file (#1749001) - useradd: clarify valid usernames/groupnames (#1869432) - login.defs: link login specific information to its own package (#1804766) - nss.c: shadow_logfd to stderr. Resolves: RHEL-83432 - pwck/grpck: only force nscd/sssd caches flush if anything was changed Resolves: RHEL-123912 - salt: remove rounds from salt string. Resolves: RHEL-16668 - login.defs: include SHA_CRYPT_MAX_ROUNDS. Resolves: RHEL-15024 - gpasswd: fix password leak. Resolves: #2215947 - Update patch to close label to reset libselinux state. Resolves: #1984740 - useradd: check if subid range exists for user. Resolves: #2012929 - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #1994269 - subordinateio: also compare the owner ID. Resolves: #2093311 - Fix release sources - Add subid requirement for subid-devel - getsubids: provide system binary and man page. Resolves: #2013016 - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782 - Creation of subid and subid-devel subpackages (#2013009) - libsubid: creation and nsswitch support - libsubid: don't print error messages on stderr by default - libsubid: libsubid_init return false if out of memory - libsubid: don't return owner in list_owner_ranges API call - libsubid: libsubid_init don't print messages on error - libsubid: fix newusers when nss provides subids - libsubid: make shadow_logfd not extern - useradd: fix SUB_UID_COUNT=0 - man: mention NSS in new[ug]idmap manpages - man: clarify subid delegation - usermod: allow all group types with -G option (#1967641) - man: Remove references to LOGIN_STRING in login.defs (#1884702) - salt: remove rounds from salt string. Resolves: RHEL-16668 - login.defs: include SHA_CRYPT_MAX_ROUNDS. Resolves: RHEL-15024 - gpasswd: fix password leak. Resolves: #2215947 - Update patch to close label to reset libselinux state. Resolves: #1984740 - useradd: check if subid range exists for user. Resolves: #2012929 - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #1994269 - subordinateio: also compare the owner ID. Resolves: #2093311 - Fix release sources - Add subid requirement for subid-devel - getsubids: provide system binary and man page. Resolves: #2013016 - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782 - Creation of subid and subid-devel subpackages (#2013009) - libsubid: creation and nsswitch support - libsubid: don't print error messages on stderr by default - libsubid: libsubid_init return false if out of memory - libsubid: don't return owner in list_owner_ranges API call - libsubid: libsubid_init don't print messages on error - libsubid: fix newusers when nss provides subids - libsubid: make shadow_logfd not extern - useradd: fix SUB_UID_COUNT=0 - man: mention NSS in new[ug]idmap manpages - man: clarify subid delegation - usermod: allow all group types with -G option (#1967641) - man: Remove references to LOGIN_STRING in login.defs (#1884702) - lib/sssd: redirect warning message to file (#1749001) - useradd: clarify valid usernames/groupnames (#1869432) - login.defs: link login specific information to its own package (#1804766) - nss.c: shadow_logfd to stderr. Resolves: RHEL-83432 - pwck/grpck: only force nscd/sssd caches flush if anything was changed Resolves: RHEL-123912 - salt: remove rounds from salt string. Resolves: RHEL-16668 - login.defs: include SHA_CRYPT_MAX_ROUNDS. Resolves: RHEL-15024 - gpasswd: fix password leak. Resolves: #2215947 - Update patch to close label to reset libselinux state. Resolves: #1984740 - useradd: check if subid range exists for user. Resolves: #2012929 - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #1994269 - subordinateio: also compare the owner ID. Resolves: #2093311 - Fix release sources - Add subid requirement for subid-devel - getsubids: provide system binary and man page. Resolves: #2013016 - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #1986782 - Creation of subid and subid-devel subpackages (#2013009) - libsubid: creation and nsswitch support - libsubid: don't print error messages on stderr by default - libsubid: libsubid_init return false if out of memory - libsubid: don't return owner in list_owner_ranges API call - libsubid: libsubid_init don't print messages on error - libsubid: fix newusers when nss provides subids - libsubid: make shadow_logfd not extern - useradd: fix SUB_UID_COUNT=0 - man: mention NSS in new[ug]idmap manpages - man: clarify subid delegation - usermod: allow all group types with -G option (#1967641) - man: Remove references to LOGIN_STRING in login.defs (#1884702) - Resolves: RHEL-5727 (Fix detection of executable files) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - cleanup scriptlets + shared-mime-info-1.9-1 - Update to 1.9 + shared-mime-info-1.8-6 - Update file-roller-defaults.list updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild + shared-mime-info-1.8-3 - Assign CSV files to LO Calc not Math - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Update to 1.8 - don't use memcpy() on overlapping buffers (#1607024) - Rebuild against oniguruma 6.8.1 - update to 2.3.2 - add gcc to build requirements - include soname in file list - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - update to 2.3.2-pre20 - drop unnecessary macro - use macro for ldconfig scriptlets - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - drop static subpackage (#1436909) - remove Group tags and indent spec (#1436909) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - update to 2.3.1a - don't report new non-device related errors as critical (#RHEL-6982) - support reporting of Error Counter logging details (#2136439) - smartmontools updated to 7.1 (#1671154) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Remove old crufty coreutils requires - smartmontools updated to 6.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - enable location for persistence data(#1291928) - Don't download drivedb.h at build time, use the shipped Source5 - fix pending count output breaking json format (RHEL-148723) - don't report new non-device related errors as critical (#RHEL-6982) - support reporting of Error Counter logging details (#2136439) - smartmontools updated to 7.1 (#1671154) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Remove old crufty coreutils requires - smartmontools updated to 6.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Resolves: RHEL-11417 Upgrade smc-tools to latest version - smc_stats: Fix man page name - Bump version. - Resolves: #2110414 Upgrade smc-tools to latest version - Upgrade smc-tools to latest version - Add User-defined EID (Enterprise ID) Support - Resolves: #1919228 - Resolves: #2043841 - Upgrade smc-tools to latest version - Resolves: #1984975 - Patch stats.c to fix overruns - Patch stats.c to fix leaks - Patch stats.c to fix fallback counter values - Resolves: #1993469 - Patch smc_chk to use platform-python - Resolves: #1981727 - Resolves: #1869292 Statistics Support - smc-tools part - Resolves: #1919225 Add SMC-D Setup Check (smc-tools) - Resolves: #1919240 Upgrade smc-tools to latest version - Resolves: #1924787 - Add python3/man requires - Resolves: #1924787 - Upgrade to 1.5.0 - Resolves: #1879128 - Add bash-completion to build requires - Resolves: RHEL-224216 - fix rpminspect license and debuginfo errors - Resolves: RHEL-159089 - smc-tools: smc_rnics is not listing the NetH/NetD cards inside the guest - Resolves: RHEL-11417 Upgrade smc-tools to latest version - smc_stats: Fix man page name - Bump version. - Resolves: #2110414 Upgrade smc-tools to latest version - Upgrade smc-tools to latest version - Add User-defined EID (Enterprise ID) Support - Resolves: #1919228 - Resolves: #2043841 - Upgrade smc-tools to latest version - Resolves: #1984975 - Patch stats.c to fix overruns - Patch stats.c to fix leaks - Patch stats.c to fix fallback counter values - Resolves: #1993469 - Patch smc_chk to use platform-python - Resolves: #1981727 - Resolves: #1869292 Statistics Support - smc-tools part - Resolves: #1919225 Add SMC-D Setup Check (smc-tools) - Resolves: #1919240 Upgrade smc-tools to latest version - Resolves: #1924787 - Add python3/man requires - Obsolete snappy-devel versions lower than 1.1.8-2 as lower versions have multilib issues. - Fix multilib (i686 and x86) issues with snappy-devel package - Rebase to latest github version Snappy-1.1.8 - Also change the URL to reflect to the updated github location. - Added BR: gcc-c++ according to new packaging guidelines. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Fixed https://bugzilla.redhat.com/show_bug.cgi?id=1527850 - Updated to new release. - Build with CMake since autotool support is deprecated. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to 4.10.0-4 Resolves: RHEL-112413 - Update to 4.10.0-2 Resolves: RHEL-112413 - Update to 4.10.0 Resolves: RHEL-110499 - Update to 4.9.2 in RHEL 8 Resolves: RHEL-101716 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.9.1 in RHEL 8 Resolves: RHEL-86645 - Update to 4.8.2 in RHEL 8 Resolves: RHEL-72941 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - Fixing sosreport and sos-collector binary Resolves: RHEL-121468 - Update to 4.10.1-1 Resolves: RHEL-121468 - Update to 4.10.0-4 Resolves: RHEL-112413 - Update to 4.10.0-2 Resolves: RHEL-112413 - Update to 4.10.0 Resolves: RHEL-110499 - Update to 4.9.2 in RHEL 8 Resolves: RHEL-101716 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.9.1 in RHEL 8 Resolves: RHEL-86645 - Update to 4.8.2 in RHEL 8 Resolves: RHEL-72941 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Update to 4.10.2-2 Resolves: RHEL-142630 - Update to 4.10.2-1 Resolves: RHEL-142630 - Fixing sosreport and sos-collector binary Resolves: RHEL-121468 - Update to 4.10.1-1 Resolves: RHEL-121468 - Update to 4.10.0-4 Resolves: RHEL-112413 - Update to 4.10.0-2 Resolves: RHEL-112413 - Update to 4.10.0 Resolves: RHEL-110499 - Update to 4.9.2 in RHEL 8 Resolves: RHEL-101716 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.9.1 in RHEL 8 Resolves: RHEL-86645 - Update to 4.11.0-1 Resolves: RHEL-157813 - Update to 4.10.2-2 Resolves: RHEL-142630 - Update to 4.10.2-1 Resolves: RHEL-142630 - Fixing sosreport and sos-collector binary Resolves: RHEL-121468 - Update to 4.10.1-1 Resolves: RHEL-121468 - Update to 4.10.0-4 Resolves: RHEL-112413 - Update to 4.10.0-2 Resolves: RHEL-112413 - Update to 4.10.0 Resolves: RHEL-110499 - Update to 4.9.2 in RHEL 8 Resolves: RHEL-101716 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.11.2-4 - Update to 4.11.2-2 - Update to 4.11.2-1 - Update to 4.11.0-1 Resolves: RHEL-157813 - Update to 4.10.2-2 Resolves: RHEL-142630 - Update to 4.10.2-1 Resolves: RHEL-142630 - Fixing sosreport and sos-collector binary Resolves: RHEL-121468 - Update to 4.10.1-1 Resolves: RHEL-121468 - Update to 4.10.0-4 Resolves: RHEL-112413 - Update to 4.10.0-2 Resolves: RHEL-112413 - Debrand for AlmaLinux - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - rebase to upstream 4.6.1 Resolves: RHEL-21173 - [redhat] Change authentication method for RHEL Resolves: RHEL-21177 [pulpcore] Scrub AUTH_LDAP_BIND_PASSWORD value Resolves: RHEL-13697 - [pulp] Fix dynaconf obfuscation and add AUTH_LDAP_BIND_PASSWORD Resolves: RHEL-13697 - [openshift_ovn] Collect additional ovnkube node logs Resolves: SUPDEV145 - [cleaner] Use data filter for extraction Resolves: bz2218873 - Rebase sos to 4.5.6 Resolves: bz2226724 - Debrand for AlmaLinux - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - rebase to upstream 4.6.1 Resolves: RHEL-21173 - [redhat] Change authentication method for RHEL Resolves: RHEL-21177 [pulpcore] Scrub AUTH_LDAP_BIND_PASSWORD value Resolves: RHEL-13697 - [pulp] Fix dynaconf obfuscation and add AUTH_LDAP_BIND_PASSWORD Resolves: RHEL-13697 - [openshift_ovn] Collect additional ovnkube node logs Resolves: SUPDEV145 - [cleaner] Use data filter for extraction Resolves: bz2218873 - Rebase sos to 4.5.6 Resolves: bz2226724 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - rebase to upstream 4.6.1 Resolves: RHEL-21173 - [redhat] Change authentication method for RHEL Resolves: RHEL-21177 [pulpcore] Scrub AUTH_LDAP_BIND_PASSWORD value Resolves: RHEL-13697 - [pulp] Fix dynaconf obfuscation and add AUTH_LDAP_BIND_PASSWORD Resolves: RHEL-13697 - [openshift_ovn] Collect additional ovnkube node logs Resolves: SUPDEV145 - [cleaner] Use data filter for extraction Resolves: bz2218873 - Backport upstream patch to fix distro detection Obtained from: https://github.com/sosreport/sos/pull/3870 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - New upstream release Resolves: RHEL-58097 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - New upstream release Resolves: RHEL-58097 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - rebase to upstream 4.6.1 Resolves: RHEL-21173 - [redhat] Change authentication method for RHEL Resolves: RHEL-21177 - Update to 4.8.2 in RHEL 8 Resolves: RHEL-72941 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - New upstream release Resolves: RHEL-58097 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.9.1 in RHEL 8 Resolves: RHEL-86645 - Update to 4.8.2 in RHEL 8 Resolves: RHEL-72941 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - New upstream release Resolves: RHEL-58097 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - Update to 4.9.2 in RHEL 8 Resolves: RHEL-101716 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.9.1 in RHEL 8 Resolves: RHEL-86645 - Update to 4.8.2 in RHEL 8 Resolves: RHEL-72941 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - New upstream release Resolves: RHEL-58097 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - Update to 4.10.0-4 Resolves: RHEL-112413 - Update to 4.10.0-2 Resolves: RHEL-112413 - Update to 4.10.0 Resolves: RHEL-110499 - Update to 4.9.2 in RHEL 8 Resolves: RHEL-101716 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.9.1 in RHEL 8 Resolves: RHEL-86645 - Update to 4.8.2 in RHEL 8 Resolves: RHEL-72941 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - Fixing sosreport and sos-collector binary Resolves: RHEL-121468 - Update to 4.10.1-1 Resolves: RHEL-121468 - Update to 4.10.0-4 Resolves: RHEL-112413 - Update to 4.10.0-2 Resolves: RHEL-112413 - Update to 4.10.0 Resolves: RHEL-110499 - Update to 4.9.2 in RHEL 8 Resolves: RHEL-101716 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.9.1 in RHEL 8 Resolves: RHEL-86645 - Update to 4.8.2 in RHEL 8 Resolves: RHEL-72941 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Update to 4.10.2-2 Resolves: RHEL-142630 - Update to 4.10.2-1 Resolves: RHEL-142630 - Fixing sosreport and sos-collector binary Resolves: RHEL-121468 - Update to 4.10.1-1 Resolves: RHEL-121468 - Update to 4.10.0-4 Resolves: RHEL-112413 - Update to 4.10.0-2 Resolves: RHEL-112413 - Update to 4.10.0 Resolves: RHEL-110499 - Update to 4.9.2 in RHEL 8 Resolves: RHEL-101716 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.9.1 in RHEL 8 Resolves: RHEL-86645 - Update to 4.11.0-1 Resolves: RHEL-157813 - Update to 4.10.2-2 Resolves: RHEL-142630 - Update to 4.10.2-1 Resolves: RHEL-142630 - Fixing sosreport and sos-collector binary Resolves: RHEL-121468 - Update to 4.10.1-1 Resolves: RHEL-121468 - Update to 4.10.0-4 Resolves: RHEL-112413 - Update to 4.10.0-2 Resolves: RHEL-112413 - Update to 4.10.0 Resolves: RHEL-110499 - Update to 4.9.2 in RHEL 8 Resolves: RHEL-101716 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.11.2-4 - Update to 4.11.2-2 - Update to 4.11.2-1 - Update to 4.11.0-1 Resolves: RHEL-157813 - Update to 4.10.2-2 Resolves: RHEL-142630 - Update to 4.10.2-1 Resolves: RHEL-142630 - Fixing sosreport and sos-collector binary Resolves: RHEL-121468 - Update to 4.10.1-1 Resolves: RHEL-121468 - Update to 4.10.0-4 Resolves: RHEL-112413 - Update to 4.10.0-2 Resolves: RHEL-112413 - Debrand for AlmaLinux - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - rebase to upstream 4.6.1 Resolves: RHEL-21173 - [redhat] Change authentication method for RHEL Resolves: RHEL-21177 [pulpcore] Scrub AUTH_LDAP_BIND_PASSWORD value Resolves: RHEL-13697 - [pulp] Fix dynaconf obfuscation and add AUTH_LDAP_BIND_PASSWORD Resolves: RHEL-13697 - [openshift_ovn] Collect additional ovnkube node logs Resolves: SUPDEV145 - [cleaner] Use data filter for extraction Resolves: bz2218873 - Rebase sos to 4.5.6 Resolves: bz2226724 - Debrand for AlmaLinux - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - rebase to upstream 4.6.1 Resolves: RHEL-21173 - [redhat] Change authentication method for RHEL Resolves: RHEL-21177 [pulpcore] Scrub AUTH_LDAP_BIND_PASSWORD value Resolves: RHEL-13697 - [pulp] Fix dynaconf obfuscation and add AUTH_LDAP_BIND_PASSWORD Resolves: RHEL-13697 - [openshift_ovn] Collect additional ovnkube node logs Resolves: SUPDEV145 - [cleaner] Use data filter for extraction Resolves: bz2218873 - Rebase sos to 4.5.6 Resolves: bz2226724 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - rebase to upstream 4.6.1 Resolves: RHEL-21173 - [redhat] Change authentication method for RHEL Resolves: RHEL-21177 [pulpcore] Scrub AUTH_LDAP_BIND_PASSWORD value Resolves: RHEL-13697 - [pulp] Fix dynaconf obfuscation and add AUTH_LDAP_BIND_PASSWORD Resolves: RHEL-13697 - [openshift_ovn] Collect additional ovnkube node logs Resolves: SUPDEV145 - [cleaner] Use data filter for extraction Resolves: bz2218873 - Backport upstream patch to fix distro detection Obtained from: https://github.com/sosreport/sos/pull/3870 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - New upstream release Resolves: RHEL-58097 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - New upstream release Resolves: RHEL-58097 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - rebase to upstream 4.6.1 Resolves: RHEL-21173 - [redhat] Change authentication method for RHEL Resolves: RHEL-21177 - Update to 4.8.2 in RHEL 8 Resolves: RHEL-72941 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - New upstream release Resolves: RHEL-58097 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - rebase to upstream 4.7.1 Resolves: RHEL-32104 - rebase to upstream 4.7.0 Resolves: RHEL-26111 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.9.1 in RHEL 8 Resolves: RHEL-86645 - Update to 4.8.2 in RHEL 8 Resolves: RHEL-72941 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - New upstream release Resolves: RHEL-58097 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - [archive] Fix get_archive_root after files reordering Resolves: RHEL-35945 - Update to 4.9.2 in RHEL 8 Resolves: RHEL-101716 - Update to 4.9.1-2 in RHEL 8 Resolves: RHEL-86645 - Update to 4.9.1 in RHEL 8 Resolves: RHEL-86645 - Update to 4.8.2 in RHEL 8 Resolves: RHEL-72941 - Update to 4.8.1 in RHEL 8 Resolves: RHEL-64160 - Added credentials obfuscation from multiple files Resolves: RHEL-58097 - Resolves: RHEL-22732 Fix wrong formatting - New upstream release Resolves: RHEL-58097 - reverting RHEL-22732 patch due to regressions Resolves: RHEL-49779 - New upstream release Resolves: RHEL-40871 Resolves: RHEL-33703 Resolves: RHEL-22732 - Fix segfault on restore default acl (rhbz#1567836) - Use standard Fedora linker flags (bug #1548670) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Build properly on MIPS - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - fix segfault for pax -X (#1175009) - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed bug in CVE-2019-20218 (#1791592) - Fixed CVE-2020-13632 (#1845572) - Fixed CVE-2020-13631 (#1845474) - Fixed CVE-2020-13630 (#1845153) - Fixes CVE-2025-6965 - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed bug in CVE-2019-20218 (#1791592) - Fixes CVE-2026-11822 and CVE-2026-11824 - Fixes CVE-2025-6965 - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed bug in CVE-2019-20218 (#1791592) - Fixed CVE-2020-13632 (#1845572) - Fixed CVE-2020-13631 (#1845474) - Fixed CVE-2020-13630 (#1845153) - Fixes CVE-2025-6965 - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed bug in CVE-2019-20218 (#1791592) - Fixes CVE-2026-11822 and CVE-2026-11824 - Fixes CVE-2025-6965 - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed bug in CVE-2019-20218 (#1791592) - Fixed CVE-2020-13632 (#1845572) - Fixed CVE-2020-13631 (#1845474) - Fixed CVE-2020-13630 (#1845153) - Fixes CVE-2025-6965 - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed bug in CVE-2019-20218 (#1791592) - Fixes CVE-2026-11822 and CVE-2026-11824 - Fixes CVE-2025-6965 - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed bug in CVE-2019-20218 (#1791592) - Fixed CVE-2020-13632 (#1845572) - Fixed CVE-2020-13631 (#1845474) - Fixed CVE-2020-13630 (#1845153) - Fixes CVE-2025-6965 - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - Fixed bug in CVE-2019-20218 (#1791592) - Fixes CVE-2026-11822 and CVE-2026-11824 - Fixes CVE-2025-6965 - Fixed CVE-2023-7104 - Fixed CVE-2022-24736 - Fixed CVE-2022-35737 - Fixed CVE-2020-35527 - Fixed CVE-2020-35525 - Removing fix for CVE-2019-19645 (unaffected) - Removing fix for CVE-2019-19880 (unaffected) - Fixed CVE-2019-5827 (#1710184) - Fixed CVE-2019-13750 (#1786510) - Fixed CVE-2019-13751 (#1786522) - Fixed CVE-2019-19603 (#1792013) - Fixed CVE-2020-13435 (#1841233) - enabled fts3conf.test on s390x and ppc64 architectures - Fixed CVE-2020-13434 (#1845843) - Fixed CVE-2020-15358 (#1855208) - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination Resolves: rhbz#2007303 rhbz#2000637 - rhbz#1895017 - unsquashfs does not preserve file capabilities rhbz#1754815 - Kdump: Building kdump initramfs img may fail with 'dracut: Failed making squash image' occasionally Resolves: rhbz#1895017, rhbz#1754815 - rhbz#1602698 - Fix coverity issues rhbz#1624173 - Fix annocheck failures rhbz#1716278 - limit max cpus in mksquashfs Resolves: rhbz#1602698, rhbz#1624173, rhbz#1716278 - Add manual gating test Resolves: rhbz#1682413 - Fix build against glibc 2.28 Resolves: rhbz#1611746 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebase to upstream release v48.0 - Resolves: RHEL-930, RHEL-4240, RHEL-6281, RHEL-6078 - Add gating tests - Resolves: rhbz#2170066 - Rebase to upstream release v46.0 - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517 - Do not use unsupported Protect* options in systemd unit files. - Resolves: rhbz#2141462 - Update to upstream release v44.0 - Resolves: rhbz#2110934, rhbz#2112931, rhbz#2142691 - Update to upstream release v41.0 - Resolves: rhbz#2049518 - Update to upstream v37.2 release for fixes - Resolves: bz2008509, bz2024865, bz1915555 - Update to upstream v37.1 release for features and fixes - Resolves: bz1982200, bz1990120, bz1982131 - Update to upstream v35 release for features and fixes - Resolves: bz1915311 - Update to upstream stable release v32.1 - Fix mlx5 pyverbs CQ test - Resolves: bz1915745, bz1907377 - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9 - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed' - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000] - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true' - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release Rebuild against rebased Samba libs - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: rhbz#2149241 - [sssd] SSSD enters failed state after heavy load in the system - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7) - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-168415 - [Addition] Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-168363 - sss_override does not work on AD UPN [rhel-8.10.z] - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [rhel-8.10.z] - Resolves: RHEL-192076 - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [rhel-8.10.z] - Resolves: RHEL-143731 - Crash in 'sss_client/autofs/sss_autofs.c' [rhel-8.10.z] - Resolves: RHEL-133476 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name [rhel-8.10.z] - Resolves: RHEL-114350 - Frequent crashes of the SSSD process (sssd_pac), leading to the termination of the AD trusted domain subprocess by the watchdog [rhel-8.10.z] - Resolves: RHEL-143719 - SSSD unable to enumerate LDAP groups with 'getent group' & 'getent group -s sss ' if LDAP server contains any group with # character in their names [rhel-8.10.z] - Resolves: RHEL-112455 - p11_child currently has an infinite timeout [rhel-8.10.z] - Resolves: RHEL-120292 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-8.10.z] - Resolves: RHEL-78300 - 'sssd_kcm' leaks memory [rhel-8.10.z] - Resolves: RHEL-82420 - Disk cache failure with large db sizes [rhel-8.10.z] - Resolves: RHEL-76022 - Use the DN from existing entry when updating a cached group [rhel-8.10.z] - Resolves: RHEL-67671 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-8.10.z] - Resolves: RHEL-68507 - sssd backend process segfaults when krb5.conf is invalid [rhel-8.10.z] - Resolves: RHEL-66267 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-8.10.z] - Resolves: RHEL-67128 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest [rhel-8.10.z] - Resolves: RHEL-66272 - sssd is skipping GPO evaluation with auto_private_groups [rhel-8.10.z] - Resolves: RHEL-66277 - possible regression of rhbz#2196521 [rhel-8.10.z] - Resolves: RHEL-39085 - [RfE] SSSD Failover Enhancements - Resolves: RHEL-33957 - ad: refresh root domain when read directly - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8] - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8] - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8] - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10 - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP' - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8] - Resolves: RHEL-10721 - very bad performance when requesting service tickets - Resolves: RHEL-19011 - Invalid handling groups from child domain - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8] - Fix segfault on restore default acl (rhbz#1567836) - Use standard Fedora linker flags (bug #1548670) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Build properly on MIPS - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - fix segfault for pax -X (#1175009) - Fix incorrect syscall name reporting in restart_syscall() on attach when PTRACE_GET_SYSCALL_INFO is in use (RHEL-8570). - Update net-yy-inet*, linkat--secontext_mismatch, and prctl-sve tests. - Fix the issues reported by covscan (#2103068). - Fix SELinux context matching for the deleted paths (#2087693). - Fix sloppy FD usage in the bpf test (#2103137). - Rebase to v5.18; drop upstream patches on top of 5.13 (#2084000). - Update tests-m32 and tests-mx32 with --secontext=mismatch option support changes (#2046259). - Add --secontext=mismatch option support (#2038810). - Fix incorrect ifname printing buffer size (#2028158). - Rebase to v5.13; drop upstream patches on top of 5.7 (#2015917). - Address some issues reported by covscan. - Add SELnux context decoding support (#1946500). - Add PID namespace translation support (#1725113). - Rebase to v5.7; drop upstream patches on top of 5.1 (#1873229). - Fix the issues reported by covscan (#2103068). - Fix SELinux context matching for the deleted paths (#2087693). - Fix sloppy FD usage in the bpf test (#2103137). - Rebase to v5.18; drop upstream patches on top of 5.13 (#2084000). - Update tests-m32 and tests-mx32 with --secontext=mismatch option support changes (#2046259). - Add --secontext=mismatch option support (#2038810). - Fix incorrect ifname printing buffer size (#2028158). - Rebase to v5.13; drop upstream patches on top of 5.7 (#2015917). - Address some issues reported by covscan. - Add SELnux context decoding support (#1946500). - Add PID namespace translation support (#1725113). - Rebase to v5.7; drop upstream patches on top of 5.1 (#1873229). - Update io_uring(2) decoder (#1853011). - Fix "Obsoletes:" tag on s390x (#1852960). - Restore support for the NO_TLSv1.[123] values for the option directive Resolves: RHEL-2340 - New upstream release 5.71 Resolves: RHEL-2340 - Enable socket activation support - verify upstream source in %prep - clean up stale conditionals - Fixes CVE-2021-20230 stunnel: client certificate not correctly verified when redirect and verifyChain options are used. - Updates documentation to specify that the option "curves" can be used in server mode only. - Fixes default tls version patch to handle default values from OpenSSL crypto policies - Adds default tls version patch to comply with OpenSSL crypto policies - New upstream release 5.56 - Fix -fstack-protector-strong build flag application - Fix bugs from Coverity scan - Override system crypto policy for build tests - Drop 042_inetd test which fails in the build environment - Speed up loading client CA list from CAfile Resolves: RHEL-46411 - Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format Resolves: RHEL-50154 - Restore support for the NO_TLSv1.[123] values for the option directive Resolves: RHEL-2340 - New upstream release 5.71 Resolves: RHEL-2340 - Enable socket activation support - verify upstream source in %prep - clean up stale conditionals - Fixes CVE-2021-20230 stunnel: client certificate not correctly verified when redirect and verifyChain options are used. - Updates documentation to specify that the option "curves" can be used in server mode only. - Fixes default tls version patch to handle default values from OpenSSL crypto policies - Adds default tls version patch to comply with OpenSSL crypto policies - New upstream release 5.56 - Fix -fstack-protector-strong build flag application - Fix bugs from Coverity scan - Override system crypto policy for build tests - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - Translated using Weblate (Spanish) (ptoscano@redhat.com) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - Translated using Weblate (German) (atalanttore@googlemail.com) - New extraction for translatable strings (ptoscano@redhat.com) - Base DBusServerStubProvider on SubManFixture (mhorky@redhat.com) - Mark D-Bus tests (mhorky@redhat.com) - Remove unused classes of DBus tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Unregister (mhorky@redhat.com) - ENT-5350: Implement "force" register option in rhsm dbus python bindings (mhorky@redhat.com) - ENT-5533: Fix failures of D-Bus' Register tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Register (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Products (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of AllFacts (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Entitlement (mhorky@redhat.com) - Fix typo in method name of EntitlementService (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Consumer (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Attach (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Config (mhorky@redhat.com) - Skip AsyncPool tests (mhorky@redhat.com) - Catch generic OSError during BaseRestLib._request() (ptoscano@redhat.com) - Catch also CertificateLoadingError for identity cert loading (ptoscano@redhat.com) - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com) - Improve formatting of CertificateLoadingError (ptoscano@redhat.com) - Raise a new CertificateLoadingError on X.509 loading failures (ptoscano@redhat.com) - Improve formatting of UnknownContentException (ptoscano@redhat.com) - connection: improve the internal UnknownContentException (ptoscano@redhat.com) - utils: add terminal_printable_content (ptoscano@redhat.com) - connection: rename NetworkException to UnknownContentException (ptoscano@redhat.com) - Improve formatting of ProxyException (ptoscano@redhat.com) - connection: improve the internal ProxyException (ptoscano@redhat.com) - Improve formatting of socket.gaierror (ptoscano@redhat.com) - Improve formatting of ConnectionError (ptoscano@redhat.com) - Improve formatting of BadCertificateException (ptoscano@redhat.com) - connection: extend BadCertificateException w/ SSL exception (ptoscano@redhat.com) - connection: drop dead code (ptoscano@redhat.com) - ENT-4286: Additional fix for exception handling (jajerome@redhat.com) - ENT-4286: Simplify exception reporting with system_exit() (jajerome@redhat.com) - Cloud-what: Make saving token file more robust (jhnidek@redhat.com) - Remove deprecated function call (mhorky@redhat.com) - Fix failures of D-Bus' Register tests (mhorky@redhat.com) - Show locals in pytest output (mhorky@redhat.com) - tito: add rhel 8.8 releaser (ptoscano@redhat.com) - Translated using Weblate (Japanese) (suanand@redhat.com) - Translated using Weblate (French) (vincent.lefebvre59@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - ENT-5510: Fix issues with proxy and cockpit interaction (jajerome@redhat.com) - 2118486: [1.28] Implement "force" register option in rhsm dbus python binding (jajerome@redhat.com) - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Italian) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Spanish) (fserrador@gmail.com) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (French) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (German) (atalanttore@googlemail.com) - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - tests: fix mocking of get_terminal_width() in TestColumnize (ptoscano@redhat.com) - feat: print compliance errors & syspurpose status only in entitlement mode (ptoscano@redhat.com) - feat: print "registered" as status when using SCA (ptoscano@redhat.com) - feat: print "not registered" on status when not registered (ptoscano@redhat.com) - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com) - refactor: move determination of content access mode in own method (ptoscano@redhat.com) - tests: move StubIdentity to stubs (ptoscano@redhat.com) - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com) - chore: move banner printing to its own function (ptoscano@redhat.com) - ci: bump actions/upload-artifact from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - ci: bump actions/checkout from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - test: cockpit: switch to CERT auth for insights-client (ptoscano@redhat.com) - test: cockpit: mock-insights: implement upload and delete platform endpoints (ptoscano@redhat.com) - test: cockpit: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com) - test: cockpit: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com) - feat: cockpit: switch from .last-upload.results to .lastupload (ptoscano@redhat.com) - chore: cockpit: test: use the new syspurpose command (ptoscano@redhat.com) - test: cockpit: wait more when registering to Insights (ptoscano@redhat.com) - test: cockpit: break insights-client in a different way (ptoscano@redhat.com) - test: cockpit: mock-insights: return 404 for missing systems in /systems (ptoscano@redhat.com) - test: cockpit: wait longer in certain situations (ptoscano@redhat.com) - test: cockpit: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com) - chore(ci): Use Vault for CentOS Stream 8 (mhorky@redhat.com) - fix: Hide subscription management "errors" in container mode (mhorky@redhat.com) - feat: 1.28 Added more AWS cloud facts (jhnidek@redhat.com) - feat: 1.28 Added zone GCP fact (jhnidek@redhat.com) - feat: 1.28 Azure: added extended location and type of location fact (jhnidek@redhat.com) - fix: 1.28 Update version of Azure metadata (jhnidek@redhat.com) - feat: 1.28 Added Azure location to facts (jhnidek@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - Translated using Weblate (Spanish) (ptoscano@redhat.com) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - Translated using Weblate (German) (atalanttore@googlemail.com) - New extraction for translatable strings (ptoscano@redhat.com) - Base DBusServerStubProvider on SubManFixture (mhorky@redhat.com) - Mark D-Bus tests (mhorky@redhat.com) - Remove unused classes of DBus tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Unregister (mhorky@redhat.com) - ENT-5350: Implement "force" register option in rhsm dbus python bindings (mhorky@redhat.com) - ENT-5533: Fix failures of D-Bus' Register tests (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Register (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Products (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of AllFacts (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Entitlement (mhorky@redhat.com) - Fix typo in method name of EntitlementService (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Consumer (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Attach (mhorky@redhat.com) - ENT-5533: Update D-Bus tests of Config (mhorky@redhat.com) - Skip AsyncPool tests (mhorky@redhat.com) - Catch generic OSError during BaseRestLib._request() (ptoscano@redhat.com) - Catch also CertificateLoadingError for identity cert loading (ptoscano@redhat.com) - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com) - Improve formatting of CertificateLoadingError (ptoscano@redhat.com) - Raise a new CertificateLoadingError on X.509 loading failures (ptoscano@redhat.com) - Improve formatting of UnknownContentException (ptoscano@redhat.com) - connection: improve the internal UnknownContentException (ptoscano@redhat.com) - utils: add terminal_printable_content (ptoscano@redhat.com) - connection: rename NetworkException to UnknownContentException (ptoscano@redhat.com) - Improve formatting of ProxyException (ptoscano@redhat.com) - connection: improve the internal ProxyException (ptoscano@redhat.com) - Improve formatting of socket.gaierror (ptoscano@redhat.com) - Improve formatting of ConnectionError (ptoscano@redhat.com) - Improve formatting of BadCertificateException (ptoscano@redhat.com) - connection: extend BadCertificateException w/ SSL exception (ptoscano@redhat.com) - connection: drop dead code (ptoscano@redhat.com) - ENT-4286: Additional fix for exception handling (jajerome@redhat.com) - ENT-4286: Simplify exception reporting with system_exit() (jajerome@redhat.com) - Cloud-what: Make saving token file more robust (jhnidek@redhat.com) - Remove deprecated function call (mhorky@redhat.com) - Fix failures of D-Bus' Register tests (mhorky@redhat.com) - Show locals in pytest output (mhorky@redhat.com) - tito: add rhel 8.8 releaser (ptoscano@redhat.com) - Translated using Weblate (Japanese) (suanand@redhat.com) - Translated using Weblate (French) (vincent.lefebvre59@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - ENT-5510: Fix issues with proxy and cockpit interaction (jajerome@redhat.com) - 2118486: [1.28] Implement "force" register option in rhsm dbus python binding (jajerome@redhat.com) - AlmaLinux changes - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Italian) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Spanish) (fserrador@gmail.com) - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (French) (noreply-mt-weblate-translation- memory@weblate.org) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com) - Translated using Weblate (Italian) (info@salvatorecocuzza.it) - Translated using Weblate (French) (leane.grasser@proton.me) - Translated using Weblate (German) (atalanttore@googlemail.com) - Translated using Weblate (Russian) (aleksejfedorov963@gmail.com) - Translated using Weblate (Korean) (simmon@nplob.com) - tests: fix mocking of get_terminal_width() in TestColumnize (ptoscano@redhat.com) - feat: print compliance errors & syspurpose status only in entitlement mode (ptoscano@redhat.com) - feat: print "registered" as status when using SCA (ptoscano@redhat.com) - feat: print "not registered" on status when not registered (ptoscano@redhat.com) - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com) - refactor: move determination of content access mode in own method (ptoscano@redhat.com) - tests: move StubIdentity to stubs (ptoscano@redhat.com) - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com) - chore: move banner printing to its own function (ptoscano@redhat.com) - ci: bump actions/upload-artifact from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - ci: bump actions/checkout from 3 to 4 (49699333+dependabot[bot]@users.noreply.github.com) - test: cockpit: switch to CERT auth for insights-client (ptoscano@redhat.com) - test: cockpit: mock-insights: implement upload and delete platform endpoints (ptoscano@redhat.com) - test: cockpit: mock-insights: fix/improve handling of IDs (ptoscano@redhat.com) - test: cockpit: mock-insights: refactor of two platform endpoints (ptoscano@redhat.com) - feat: cockpit: switch from .last-upload.results to .lastupload (ptoscano@redhat.com) - chore: cockpit: test: use the new syspurpose command (ptoscano@redhat.com) - test: cockpit: wait more when registering to Insights (ptoscano@redhat.com) - test: cockpit: break insights-client in a different way (ptoscano@redhat.com) - test: cockpit: mock-insights: return 404 for missing systems in /systems (ptoscano@redhat.com) - test: cockpit: wait longer in certain situations (ptoscano@redhat.com) - test: cockpit: assume /root/run-candlepin to start candlepin (ptoscano@redhat.com) - chore(ci): Use Vault for CentOS Stream 8 (mhorky@redhat.com) - fix: Hide subscription management "errors" in container mode (mhorky@redhat.com) - feat: 1.28 Added more AWS cloud facts (jhnidek@redhat.com) - feat: 1.28 Added zone GCP fact (jhnidek@redhat.com) - feat: 1.28 Azure: added extended location and type of location fact (jhnidek@redhat.com) - fix: 1.28 Update version of Azure metadata (jhnidek@redhat.com) - feat: 1.28 Added Azure location to facts (jhnidek@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mariocanfly@hotmail.com) - RHEL-21049: [1.28] RegisterServer is stopped, when not needed (jhnidek@redhat.com) - RHEL-21049: [1.28] Fix issue with registration using gsd-subman (jhnidek@redhat.com) - tito: drop bz requirement (ptoscano@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com) - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com) - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com) - cli: normalize hostname in error message (ptoscano@redhat.com) - connection: normalize hostname in ConnectionOSErrorException (ptoscano@redhat.com) - Improved printing of addresses and URLs (jhnidek@redhat.com) - Use username and password from --proxy=URL (jhnidek@redhat.com) - Use parse_url() from utils.py for parsing URL, when --proxy is used. (jhnidek@redhat.com) - RHEL-13375: 1.28 Parse URL properly (jhnidek@redhat.com) - ci: stop testing on Fedora (ptoscano@redhat.com) - Simplify autoregistration test setup (mhorky@redhat.com) - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com) - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - Update translation files (noreply@weblate.org) - 2225443: [1.28] Hotfix of D-Bus policy (jhnidek@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Punjabi) (jsefler@redhat.com) - Translated using Weblate (Korean) (simmon@nplob.com) - [1.28] Update messaging around the "container mode" (#3310) (34436146+grunwmar@users.noreply.github.com) - ENT-5624: Properly translate error strings (mhorky@redhat.com) - ENT-5610: Explicitly check for provided entitlement certificates (mhorky@redhat.com) - Fix flake8 errors (mhorky@redhat.com) - Run flake8 and rpmlint on CI (mhorky@redhat.com) - Mock IOError for Insights fact collection tests (mhorky@redhat.com) - Collect GCP Project information as cloud facts (chambrid@redhat.com) - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com) - Update cockpit test lib for Chromium 113 fix (martin@piware.de) - tests: repair attach cases in SCA mode (ptoscano@redhat.com) - 2091269: Make locking more reliable (jhnidek@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - Update translation files (noreply@weblate.org) - Clean up tests using Cloud What detectors properly (mhorky@redhat.com) - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com) - New extraction for translatable strings (ptoscano@redhat.com) - Translated using Weblate (Italian) (toscano.pino@tiscali.it) - 2150814: Drop RHN migration (ptoscano@redhat.com) - ci: stop testing on Fedora Rawhide (ptoscano@redhat.com) - Drop redhat-uep.pem (ptoscano@redhat.com) - Move redhat-entitlement-authority.pem to container plugin (ptoscano@redhat.com) - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com) - utils: import pkg_resources only when needed (ptoscano@redhat.com) - ENT-5532: Call rhsm-package-profile-uploader with --force-upload (jhnidek@redhat.com) - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com) - Create log dir by rhsmcertd, when log dir does not exist (jhnidek@redhat.com) - Fix issue with old glib not containing one macro (jhnidek@redhat.com) - 2132242: [1.28] Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com) - 1890080: Handle IOErrors and Exceptions when looking for process names (csnyder@redhat.com) - ci: install nodejs-npm on Fedora (ptoscano@redhat.com) - tito: add centos-8-stream releaser (ptoscano@redhat.com) - 2174887: register: do a simple strip() on environment(s) input (ptoscano@redhat.com) - [1.28] Remove source code of rhsm-icon (jhnidek@redhat.com) - Fix of unit tests of d-bus register: extended list of exceptions for catching. (jhnidek@redhat.com) - [1.28] Include D-Bus sender in User-Agent http header; Singleton (jhnidek@redhat.com) - Revert "Try to use --forked for all unit tests." (ptoscano@redhat.com) - test: add simple test for 1982670 (ptoscano@redhat.com) - 2076948: [1.28] Fix issue with race condition in rhsm.service (jhnidek@redhat.com) - 1982670: do not collect unentitled products in SCA mode (ptoscano@redhat.com) - Use dmidecode on aarch64 (jhnidek@redhat.com) - Fix possible parsing issues of dmidecode output (mhorky@redhat.com) - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com) - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com) - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com) - facts: add dmidecode parser and facts collector (ptoscano@redhat.com) - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com) - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com) - tests: Install dnf-plugins-core every time (mhorky@redhat.com) - Translated using Weblate (French) (ljanda@redhat.com) - Translated using Weblate (French) (suanand@redhat.com) - Translated using Weblate (Korean) (jsefler@redhat.com) - 2168576: cockpit: insights: fix spawn_error_to_string in more cases (ptoscano@redhat.com) - cockpit: Fix the issue, when it is not possible to install insights-client (jhnidek@redhat.com) - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com) - 2166317: gui: do not use an empty environment string (ptoscano@redhat.com) - Test libdnf plugin using GitHub Actions (mhorky@redhat.com) - libdnf: fix return value of findProductId() (ptoscano@redhat.com) - 1938878: Fix issues discovered by static code analyzers (#2644) (jhnidek@redhat.com) - ENT-5541: Publish PR coverage (mhorky@redhat.com) - 2166623: gui: use UnknownContentException instead of NetworkException (ptoscano@redhat.com) - ENT-3759: Test on GitHub Actions (mhorky@redhat.com) - Alter import of rhsm.config functions (mhorky@redhat.com) - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com) - tests: drop test_po_files.py (ptoscano@redhat.com) - Ensure tests don't fail when run under root (mhorky@redhat.com) - build: pin pytest to < 7 (ptoscano@redhat.com) - rhsm: drop custom which() implementation (ptoscano@redhat.com) - facts: switch to shutil.which() (ptoscano@redhat.com) - Fix tests for Python 3.6 runner (mhorky@redhat.com) - Stop calling pytest with --failed-first (mhorky@redhat.com) - Handle tests in containers better (mhorky@redhat.com) - Fix issue with missing {?dist} in Release. (jhnidek@redhat.com) - Use the same version and release as Fedora already use - New package built with tito - Using new version pattern for subscription-manager-rhsm-certificates RHEL 8.10.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100014 RHEL 8.9.0.Z ERRATUM - Rebase to 1.9.5p2 - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages Resolves: RHEL-21825 - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21831 - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables Resolves: RHEL-21820 RHEL 8.8.0 ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161221 - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384) Resolves: rhbz#2114576 RHEL 8.6.0 ERRATUM - sudoedit does not work with selinux args Resolves: rhbz#2029551 - Make sure SIGCHLD is not ignored when sudo is executed Resolves: rhbz#1999751 - [RFE] pass KRB5CCNAME to pam_authenticate environment if available Resolves: rhbz#1917379 - utmp resource leak in sudo Resolves: rhbz#1986572 - RHEL 8.4 ERRATUM - CVE-2021-3156 Resolves: rhbz#1917734 - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit Resolves: rhzb#1916434 - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit Resolves: rhbz#1917038 - updated upstream url Resolves: rhbz#1923825 - RHEL 8.3 ERRATUM - sudo allows privilege escalation with expire password Resolves: rhbz#1815164 - RHEL 8.2 ERRATUM - CVE-2019-18634 Resolves: rhbz#1798093 - RHEL 8.2 ERRATUM - CVE-2019-19232 Resolves: rhbz#1786987 Resolves: rhbz#1796518 - RHEL 8.2 ERRATUM - rebase to 1.8.29 Resolves: rhbz#1733961 Resolves: rhbz#1651662 - RHEL 8.2 ERRATUM - rebase to 1.8.28p1 Resolves: rhbz#1733961 - fixed man page for always_set_home Resolves: rhbz#1576880 - sudo does not work with notbefore/after Resolves: rhbz#1679508 - NOTBEFORE showing value of sudoNotAfter Ldap attribute Resolves: rhbz#1715516 - CVE-2019-14287 sudo - Privilege escalation via 'Runas' specification with 'ALL' keyword Resolves: rhbz#1760697 RHEL 8.10.0.Z ERRATUM - Reintroduce cmnd_no_wait Resolves: RHEL-51956 - Missing separator in the log Resolves: RHEL-71913 RHEL 8.10.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100014 RHEL 8.9.0.Z ERRATUM - Rebase to 1.9.5p2 - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages Resolves: RHEL-21825 - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21831 - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables Resolves: RHEL-21820 RHEL 8.8.0 ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161221 - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384) Resolves: rhbz#2114576 RHEL 8.6.0 ERRATUM - sudoedit does not work with selinux args Resolves: rhbz#2029551 - Make sure SIGCHLD is not ignored when sudo is executed Resolves: rhbz#1999751 - [RFE] pass KRB5CCNAME to pam_authenticate environment if available Resolves: rhbz#1917379 - utmp resource leak in sudo Resolves: rhbz#1986572 - RHEL 8.4 ERRATUM - CVE-2021-3156 Resolves: rhbz#1917734 - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit Resolves: rhzb#1916434 - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit Resolves: rhbz#1917038 - updated upstream url Resolves: rhbz#1923825 - RHEL 8.3 ERRATUM - sudo allows privilege escalation with expire password Resolves: rhbz#1815164 - RHEL 8.2 ERRATUM - CVE-2019-18634 Resolves: rhbz#1798093 - RHEL 8.2 ERRATUM - CVE-2019-19232 Resolves: rhbz#1786987 Resolves: rhbz#1796518 - RHEL 8.2 ERRATUM - rebase to 1.8.29 Resolves: rhbz#1733961 Resolves: rhbz#1651662 RHEL 8.10.0.Z ERRATUM - sudo passes SHELL environment variable twice to the shell being executed [rhel-8] Resolves: RHEL-127360 RHEL 8.10.0.Z ERRATUM - Reintroduce cmnd_no_wait Resolves: RHEL-51956 - Missing separator in the log Resolves: RHEL-71913 RHEL 8.10.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100014 RHEL 8.9.0.Z ERRATUM - Rebase to 1.9.5p2 - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages Resolves: RHEL-21825 - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21831 - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables Resolves: RHEL-21820 RHEL 8.8.0 ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161221 - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384) Resolves: rhbz#2114576 RHEL 8.6.0 ERRATUM - sudoedit does not work with selinux args Resolves: rhbz#2029551 - Make sure SIGCHLD is not ignored when sudo is executed Resolves: rhbz#1999751 - [RFE] pass KRB5CCNAME to pam_authenticate environment if available Resolves: rhbz#1917379 - utmp resource leak in sudo Resolves: rhbz#1986572 - RHEL 8.4 ERRATUM - CVE-2021-3156 Resolves: rhbz#1917734 - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit Resolves: rhzb#1916434 - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit Resolves: rhbz#1917038 - updated upstream url Resolves: rhbz#1923825 - RHEL 8.3 ERRATUM - sudo allows privilege escalation with expire password Resolves: rhbz#1815164 - RHEL 8.2 ERRATUM - CVE-2019-18634 Resolves: rhbz#1798093 - RHEL 8.2 ERRATUM - CVE-2019-19232 Resolves: rhbz#1786987 Resolves: rhbz#1796518 RHEL 8.10.0.Z ERRATUM - CVE-2026-35535 - Privilege escalation due to failure in privilege drop calls Resolves: RHEL-166060 RHEL 8.10.0.Z ERRATUM - sudo passes SHELL environment variable twice to the shell being executed [rhel-8] Resolves: RHEL-127360 RHEL 8.10.0.Z ERRATUM - Reintroduce cmnd_no_wait Resolves: RHEL-51956 - Missing separator in the log Resolves: RHEL-71913 RHEL 8.10.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100014 RHEL 8.9.0.Z ERRATUM - Rebase to 1.9.5p2 - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages Resolves: RHEL-21825 - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21831 - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables Resolves: RHEL-21820 RHEL 8.8.0 ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161221 - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384) Resolves: rhbz#2114576 RHEL 8.6.0 ERRATUM - sudoedit does not work with selinux args Resolves: rhbz#2029551 - Make sure SIGCHLD is not ignored when sudo is executed Resolves: rhbz#1999751 - [RFE] pass KRB5CCNAME to pam_authenticate environment if available Resolves: rhbz#1917379 - utmp resource leak in sudo Resolves: rhbz#1986572 - RHEL 8.4 ERRATUM - CVE-2021-3156 Resolves: rhbz#1917734 - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit Resolves: rhzb#1916434 - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit Resolves: rhbz#1917038 - updated upstream url Resolves: rhbz#1923825 - RHEL 8.3 ERRATUM - sudo allows privilege escalation with expire password Resolves: rhbz#1815164 - RHEL 8.2 ERRATUM - CVE-2019-18634 Resolves: rhbz#1798093 RHEL 8.9.0.Z ERRATUM - Rebase to 1.9.5p2 - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages Resolves: RHEL-21825 - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21831 - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables Resolves: RHEL-21820 RHEL 8.8.0 ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161221 - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384) Resolves: rhbz#2114576 RHEL 8.6.0 ERRATUM - sudoedit does not work with selinux args Resolves: rhbz#2029551 - Make sure SIGCHLD is not ignored when sudo is executed Resolves: rhbz#1999751 - [RFE] pass KRB5CCNAME to pam_authenticate environment if available Resolves: rhbz#1917379 - utmp resource leak in sudo Resolves: rhbz#1986572 - RHEL 8.4 ERRATUM - CVE-2021-3156 Resolves: rhbz#1917734 - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit Resolves: rhzb#1916434 - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit Resolves: rhbz#1917038 - updated upstream url Resolves: rhbz#1923825 - RHEL 8.3 ERRATUM - sudo allows privilege escalation with expire password Resolves: rhbz#1815164 - RHEL 8.2 ERRATUM - CVE-2019-18634 Resolves: rhbz#1798093 - RHEL 8.2 ERRATUM - CVE-2019-19232 Resolves: rhbz#1786987 Resolves: rhbz#1796518 - RHEL 8.2 ERRATUM - rebase to 1.8.29 Resolves: rhbz#1733961 Resolves: rhbz#1651662 - RHEL 8.2 ERRATUM - rebase to 1.8.28p1 Resolves: rhbz#1733961 - fixed man page for always_set_home Resolves: rhbz#1576880 - sudo does not work with notbefore/after Resolves: rhbz#1679508 - NOTBEFORE showing value of sudoNotAfter Ldap attribute Resolves: rhbz#1715516 - CVE-2019-14287 sudo - Privilege escalation via 'Runas' specification with 'ALL' keyword Resolves: rhbz#1760697 - RHEL 8.1 ERRATUM - sudo ipa_hostname not honored Resolves: rhbz#1738662 RHEL 8.10.0.Z ERRATUM - CVE-2026-96512 - TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization [rhel-8.10.z] Resolves: RHEL-267341 RHEL 8.10.0.Z ERRATUM - CVE-2026-35535 - Privilege escalation due to failure in privilege drop calls Resolves: RHEL-166060 RHEL 8.10.0.Z ERRATUM - sudo passes SHELL environment variable twice to the shell being executed [rhel-8] Resolves: RHEL-127360 RHEL 8.10.0.Z ERRATUM - Reintroduce cmnd_no_wait Resolves: RHEL-51956 - Missing separator in the log Resolves: RHEL-71913 RHEL 8.10.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100014 RHEL 8.9.0.Z ERRATUM - Rebase to 1.9.5p2 - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages Resolves: RHEL-21825 - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21831 - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables Resolves: RHEL-21820 RHEL 8.8.0 ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161221 - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384) Resolves: rhbz#2114576 RHEL 8.6.0 ERRATUM - sudoedit does not work with selinux args Resolves: rhbz#2029551 - Make sure SIGCHLD is not ignored when sudo is executed Resolves: rhbz#1999751 - [RFE] pass KRB5CCNAME to pam_authenticate environment if available Resolves: rhbz#1917379 - utmp resource leak in sudo Resolves: rhbz#1986572 - RHEL 8.4 ERRATUM - CVE-2021-3156 Resolves: rhbz#1917734 - CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit Resolves: rhzb#1916434 - CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit Resolves: rhbz#1917038 - updated upstream url Resolves: rhbz#1923825 - RHEL 8.3 ERRATUM - sudo allows privilege escalation with expire password Resolves: rhbz#1815164 - fixed symlinks: Partial build flags injection - fixed upstream URL reference - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for 8.6. Resolves: rhbz#2046426 - Fix annocheck build issues (bz 1630632) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages - Rebuild for Python 3.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New upstream stable version 0.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Upstream release 1.2 which fixes: - use pwquality to test password strength for cryptsetup (#1141871) - add multipath detection support (#1309729) - add migrate command (#1014708) - fix poor luks password leads to ssm crash (rhbz#1670714) - Gating tests implementation, which meant adding few more changes to the existing patches (#1681969) - sphinx patch was merged to python3 change - add seq numbers to patch files - Bring changes from upstream 1.4 (mostly bugfixes) - Remove multipath from the list of default backends (rhbz#1685019) - Fix locale issue (rhbz#1679587) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - journald: add API to move logging from /var to /run again (#1873540) - journalctl: add new --relinquish and --smart-relinquish options (#1873540) - units: automatically revert to /run logging on shutdown if necessary (#1873540) - pstore: Tool to archive contents of pstore (#2158832) - meson: drop redundant line (#2158832) - pstore: drop unnecessary initializations (#2158832) - pstopre: fix return value of list_files() (#2158832) - pstore: remove temporary file on failure (#2158832) - pstore: do not add FILE= journal entry if content_size == 0 (#2158832) - pstore: run only when /sys/fs/pstore is not empty (#2158832) - pstore: fix use after free (#2158832) - pstore: refuse to run if arguments are specified (#2158832) - pstore: allow specifying src and dst dirs are arguments (#2158832) - pstore: rework memory handling for dmesg (#2158832) - pstore: fixes for dmesg.txt reconstruction (#2158832) - pstore: Don't start systemd-pstore.service in containers (#2158832) - units: pull in systemd-pstore.service from sysinit.target (#2158832) - units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832) - units: make sure systemd-pstore stops at shutdown (#2158832) - pstore: Run after modules are loaded (#2158832) - pstore: do not try to load all known pstore modules (#2158832) - logind-session: make stopping of idle session visible to admins (#2156780) - journald: Increase stdout buffer size sooner, when almost full (#2029426) - journald: rework end of line marker handling to use a field table (#2029426) - journald: use the fact that client_context_release() returns NULL (#2029426) - journald: rework pid change handling (#2029426) - test: Add a test case for #15654 (#2029426) - test: Stricter test case for #15654 (Add more checks) (#2029426) - man: document the new _LINE_BREAK= type (#2029426) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - user-sessions: do not remove /etc/nologin (RHEL-85520) - core: allow manager_serialize() to fail correctly (RHEL-112550) - execute: make sure to call into PAM after initializing resource limits (RHEL-5986) - pager: also check for $SUDO_UID (RHEL-102942) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - journald: add API to move logging from /var to /run again (#1873540) - journalctl: add new --relinquish and --smart-relinquish options (#1873540) - units: automatically revert to /run logging on shutdown if necessary (#1873540) - pstore: Tool to archive contents of pstore (#2158832) - meson: drop redundant line (#2158832) - pstore: drop unnecessary initializations (#2158832) - pstopre: fix return value of list_files() (#2158832) - pstore: remove temporary file on failure (#2158832) - pstore: do not add FILE= journal entry if content_size == 0 (#2158832) - pstore: run only when /sys/fs/pstore is not empty (#2158832) - pstore: fix use after free (#2158832) - pstore: refuse to run if arguments are specified (#2158832) - pstore: allow specifying src and dst dirs are arguments (#2158832) - pstore: rework memory handling for dmesg (#2158832) - pstore: fixes for dmesg.txt reconstruction (#2158832) - pstore: Don't start systemd-pstore.service in containers (#2158832) - units: pull in systemd-pstore.service from sysinit.target (#2158832) - units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832) - units: make sure systemd-pstore stops at shutdown (#2158832) - pstore: Run after modules are loaded (#2158832) - pstore: do not try to load all known pstore modules (#2158832) - logind-session: make stopping of idle session visible to admins (#2156780) - journald: Increase stdout buffer size sooner, when almost full (#2029426) - journald: rework end of line marker handling to use a field table (#2029426) - journald: use the fact that client_context_release() returns NULL (#2029426) - journald: rework pid change handling (#2029426) - test: Add a test case for #15654 (#2029426) - test: Stricter test case for #15654 (Add more checks) (#2029426) - man: document the new _LINE_BREAK= type (#2029426) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - user-sessions: do not remove /etc/nologin (RHEL-85520) - core: allow manager_serialize() to fail correctly (RHEL-112550) - execute: make sure to call into PAM after initializing resource limits (RHEL-5986) - pager: also check for $SUDO_UID (RHEL-102942) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - journald: add API to move logging from /var to /run again (#1873540) - journalctl: add new --relinquish and --smart-relinquish options (#1873540) - units: automatically revert to /run logging on shutdown if necessary (#1873540) - pstore: Tool to archive contents of pstore (#2158832) - meson: drop redundant line (#2158832) - pstore: drop unnecessary initializations (#2158832) - pstopre: fix return value of list_files() (#2158832) - pstore: remove temporary file on failure (#2158832) - pstore: do not add FILE= journal entry if content_size == 0 (#2158832) - pstore: run only when /sys/fs/pstore is not empty (#2158832) - pstore: fix use after free (#2158832) - pstore: refuse to run if arguments are specified (#2158832) - pstore: allow specifying src and dst dirs are arguments (#2158832) - pstore: rework memory handling for dmesg (#2158832) - pstore: fixes for dmesg.txt reconstruction (#2158832) - pstore: Don't start systemd-pstore.service in containers (#2158832) - units: pull in systemd-pstore.service from sysinit.target (#2158832) - units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832) - units: make sure systemd-pstore stops at shutdown (#2158832) - pstore: Run after modules are loaded (#2158832) - pstore: do not try to load all known pstore modules (#2158832) - logind-session: make stopping of idle session visible to admins (#2156780) - journald: Increase stdout buffer size sooner, when almost full (#2029426) - journald: rework end of line marker handling to use a field table (#2029426) - journald: use the fact that client_context_release() returns NULL (#2029426) - journald: rework pid change handling (#2029426) - test: Add a test case for #15654 (#2029426) - test: Stricter test case for #15654 (Add more checks) (#2029426) - man: document the new _LINE_BREAK= type (#2029426) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - user-sessions: do not remove /etc/nologin (RHEL-85520) - core: allow manager_serialize() to fail correctly (RHEL-112550) - execute: make sure to call into PAM after initializing resource limits (RHEL-5986) - pager: also check for $SUDO_UID (RHEL-102942) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - journald: add API to move logging from /var to /run again (#1873540) - journalctl: add new --relinquish and --smart-relinquish options (#1873540) - units: automatically revert to /run logging on shutdown if necessary (#1873540) - pstore: Tool to archive contents of pstore (#2158832) - meson: drop redundant line (#2158832) - pstore: drop unnecessary initializations (#2158832) - pstopre: fix return value of list_files() (#2158832) - pstore: remove temporary file on failure (#2158832) - pstore: do not add FILE= journal entry if content_size == 0 (#2158832) - pstore: run only when /sys/fs/pstore is not empty (#2158832) - pstore: fix use after free (#2158832) - pstore: refuse to run if arguments are specified (#2158832) - pstore: allow specifying src and dst dirs are arguments (#2158832) - pstore: rework memory handling for dmesg (#2158832) - pstore: fixes for dmesg.txt reconstruction (#2158832) - pstore: Don't start systemd-pstore.service in containers (#2158832) - units: pull in systemd-pstore.service from sysinit.target (#2158832) - units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832) - units: make sure systemd-pstore stops at shutdown (#2158832) - pstore: Run after modules are loaded (#2158832) - pstore: do not try to load all known pstore modules (#2158832) - logind-session: make stopping of idle session visible to admins (#2156780) - journald: Increase stdout buffer size sooner, when almost full (#2029426) - journald: rework end of line marker handling to use a field table (#2029426) - journald: use the fact that client_context_release() returns NULL (#2029426) - journald: rework pid change handling (#2029426) - test: Add a test case for #15654 (#2029426) - test: Stricter test case for #15654 (Add more checks) (#2029426) - man: document the new _LINE_BREAK= type (#2029426) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - user-sessions: do not remove /etc/nologin (RHEL-85520) - core: allow manager_serialize() to fail correctly (RHEL-112550) - execute: make sure to call into PAM after initializing resource limits (RHEL-5986) - pager: also check for $SUDO_UID (RHEL-102942) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - journald: add API to move logging from /var to /run again (#1873540) - journalctl: add new --relinquish and --smart-relinquish options (#1873540) - units: automatically revert to /run logging on shutdown if necessary (#1873540) - pstore: Tool to archive contents of pstore (#2158832) - meson: drop redundant line (#2158832) - pstore: drop unnecessary initializations (#2158832) - pstopre: fix return value of list_files() (#2158832) - pstore: remove temporary file on failure (#2158832) - pstore: do not add FILE= journal entry if content_size == 0 (#2158832) - pstore: run only when /sys/fs/pstore is not empty (#2158832) - pstore: fix use after free (#2158832) - pstore: refuse to run if arguments are specified (#2158832) - pstore: allow specifying src and dst dirs are arguments (#2158832) - pstore: rework memory handling for dmesg (#2158832) - pstore: fixes for dmesg.txt reconstruction (#2158832) - pstore: Don't start systemd-pstore.service in containers (#2158832) - units: pull in systemd-pstore.service from sysinit.target (#2158832) - units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832) - units: make sure systemd-pstore stops at shutdown (#2158832) - pstore: Run after modules are loaded (#2158832) - pstore: do not try to load all known pstore modules (#2158832) - logind-session: make stopping of idle session visible to admins (#2156780) - journald: Increase stdout buffer size sooner, when almost full (#2029426) - journald: rework end of line marker handling to use a field table (#2029426) - journald: use the fact that client_context_release() returns NULL (#2029426) - journald: rework pid change handling (#2029426) - test: Add a test case for #15654 (#2029426) - test: Stricter test case for #15654 (Add more checks) (#2029426) - man: document the new _LINE_BREAK= type (#2029426) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - user-sessions: do not remove /etc/nologin (RHEL-85520) - core: allow manager_serialize() to fail correctly (RHEL-112550) - execute: make sure to call into PAM after initializing resource limits (RHEL-5986) - pager: also check for $SUDO_UID (RHEL-102942) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - journald: add API to move logging from /var to /run again (#1873540) - journalctl: add new --relinquish and --smart-relinquish options (#1873540) - units: automatically revert to /run logging on shutdown if necessary (#1873540) - pstore: Tool to archive contents of pstore (#2158832) - meson: drop redundant line (#2158832) - pstore: drop unnecessary initializations (#2158832) - pstopre: fix return value of list_files() (#2158832) - pstore: remove temporary file on failure (#2158832) - pstore: do not add FILE= journal entry if content_size == 0 (#2158832) - pstore: run only when /sys/fs/pstore is not empty (#2158832) - pstore: fix use after free (#2158832) - pstore: refuse to run if arguments are specified (#2158832) - pstore: allow specifying src and dst dirs are arguments (#2158832) - pstore: rework memory handling for dmesg (#2158832) - pstore: fixes for dmesg.txt reconstruction (#2158832) - pstore: Don't start systemd-pstore.service in containers (#2158832) - units: pull in systemd-pstore.service from sysinit.target (#2158832) - units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832) - units: make sure systemd-pstore stops at shutdown (#2158832) - pstore: Run after modules are loaded (#2158832) - pstore: do not try to load all known pstore modules (#2158832) - logind-session: make stopping of idle session visible to admins (#2156780) - journald: Increase stdout buffer size sooner, when almost full (#2029426) - journald: rework end of line marker handling to use a field table (#2029426) - journald: use the fact that client_context_release() returns NULL (#2029426) - journald: rework pid change handling (#2029426) - test: Add a test case for #15654 (#2029426) - test: Stricter test case for #15654 (Add more checks) (#2029426) - man: document the new _LINE_BREAK= type (#2029426) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - user-sessions: do not remove /etc/nologin (RHEL-85520) - core: allow manager_serialize() to fail correctly (RHEL-112550) - execute: make sure to call into PAM after initializing resource limits (RHEL-5986) - pager: also check for $SUDO_UID (RHEL-102942) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - journald: add API to move logging from /var to /run again (#1873540) - journalctl: add new --relinquish and --smart-relinquish options (#1873540) - units: automatically revert to /run logging on shutdown if necessary (#1873540) - pstore: Tool to archive contents of pstore (#2158832) - meson: drop redundant line (#2158832) - pstore: drop unnecessary initializations (#2158832) - pstopre: fix return value of list_files() (#2158832) - pstore: remove temporary file on failure (#2158832) - pstore: do not add FILE= journal entry if content_size == 0 (#2158832) - pstore: run only when /sys/fs/pstore is not empty (#2158832) - pstore: fix use after free (#2158832) - pstore: refuse to run if arguments are specified (#2158832) - pstore: allow specifying src and dst dirs are arguments (#2158832) - pstore: rework memory handling for dmesg (#2158832) - pstore: fixes for dmesg.txt reconstruction (#2158832) - pstore: Don't start systemd-pstore.service in containers (#2158832) - units: pull in systemd-pstore.service from sysinit.target (#2158832) - units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832) - units: make sure systemd-pstore stops at shutdown (#2158832) - pstore: Run after modules are loaded (#2158832) - pstore: do not try to load all known pstore modules (#2158832) - logind-session: make stopping of idle session visible to admins (#2156780) - journald: Increase stdout buffer size sooner, when almost full (#2029426) - journald: rework end of line marker handling to use a field table (#2029426) - journald: use the fact that client_context_release() returns NULL (#2029426) - journald: rework pid change handling (#2029426) - test: Add a test case for #15654 (#2029426) - test: Stricter test case for #15654 (Add more checks) (#2029426) - man: document the new _LINE_BREAK= type (#2029426) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - user-sessions: do not remove /etc/nologin (RHEL-85520) - core: allow manager_serialize() to fail correctly (RHEL-112550) - execute: make sure to call into PAM after initializing resource limits (RHEL-5986) - pager: also check for $SUDO_UID (RHEL-102942) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - journald: add API to move logging from /var to /run again (#1873540) - journalctl: add new --relinquish and --smart-relinquish options (#1873540) - units: automatically revert to /run logging on shutdown if necessary (#1873540) - pstore: Tool to archive contents of pstore (#2158832) - meson: drop redundant line (#2158832) - pstore: drop unnecessary initializations (#2158832) - pstopre: fix return value of list_files() (#2158832) - pstore: remove temporary file on failure (#2158832) - pstore: do not add FILE= journal entry if content_size == 0 (#2158832) - pstore: run only when /sys/fs/pstore is not empty (#2158832) - pstore: fix use after free (#2158832) - pstore: refuse to run if arguments are specified (#2158832) - pstore: allow specifying src and dst dirs are arguments (#2158832) - pstore: rework memory handling for dmesg (#2158832) - pstore: fixes for dmesg.txt reconstruction (#2158832) - pstore: Don't start systemd-pstore.service in containers (#2158832) - units: pull in systemd-pstore.service from sysinit.target (#2158832) - units: drop dependency on systemd-remount-fs.service from systemd-pstore.service (#2158832) - units: make sure systemd-pstore stops at shutdown (#2158832) - pstore: Run after modules are loaded (#2158832) - pstore: do not try to load all known pstore modules (#2158832) - logind-session: make stopping of idle session visible to admins (#2156780) - journald: Increase stdout buffer size sooner, when almost full (#2029426) - journald: rework end of line marker handling to use a field table (#2029426) - journald: use the fact that client_context_release() returns NULL (#2029426) - journald: rework pid change handling (#2029426) - test: Add a test case for #15654 (#2029426) - test: Stricter test case for #15654 (Add more checks) (#2029426) - man: document the new _LINE_BREAK= type (#2029426) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - journald-server: always create state file in signal handler (#2174645) - journald-server: move relinquish code into function (#2174645) - journald-server: always touch state file in signal handler (#2174645) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-38859) - cryptsetup-generator: continue parsing after error (RHEL-38859) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - user-sessions: do not remove /etc/nologin (RHEL-85520) - core: allow manager_serialize() to fail correctly (RHEL-112550) - execute: make sure to call into PAM after initializing resource limits (RHEL-5986) - pager: also check for $SUDO_UID (RHEL-102942) - job: update job_free() to follow our usual return-NULL style (RHEL-168671) - core: don't track jobs-finishing-during-reload explicitly (RHEL-168671) - job: be more careful when removing job object from jobs hash table (RHEL-168671) - core: rework how we deserialize jobs (RHEL-168671) - core: when a unit state changes only propagate to jobs after reloading is complete (RHEL-168671) - core: extend comments regarding coldplug() vs. catchup() (RHEL-168671) - core: validate input cgroup path more prudently (RHEL-152085) - nspawn: normalize pivot_root paths (RHEL-163868) - udev: check for invalid chars in various fields received from the kernel (RHEL-163874) - udev: fix review mixup (RHEL-163874) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163874) - core/manager: fix memory leak (RHEL-163867) - resolved: add dns_query_candidate_freep() (RHEL-93425) - resolved: fix use-after-free with queries hitting the cache (RHEL-93425) - resolve: exit from loop for transactions when transactions has been regenerated (RHEL-93425) - locale-util: do not call setlocale() when multi-threaded (RHEL-93425) - core: only activate transaction that contain useful jobs (RHEL-138710) - logind: fix crash in logind on user-specified message string (RHEL-132317) - Revert "run: update checks to allow running with a user's bus" (RHEL-118835) - run: update checks to allow running with a user's bus (RHEL-118835) - hwdb: add ACCEL_LOCATION property to parse_hwdb.py (RHEL-130979) - hwdb: update ACCEL_LOCATION property to use Or instead of QuotedString (RHEL-130979) - test: support general properties in hwdb files (RHEL-130979) - hwdb: Relax parsing script to allow 0 and 1 for all ID_* properties (RHEL-130979) - hwdb: allow spaces in usb: matches and similar patterns (RHEL-130979) - test: fix parsing of 60-seat.hwdb and 60-keyboard.hwdb (RHEL-130979) - parse_hwdb: fix compatibility with pyparsing 2.4.* (RHEL-130979) - login: use parse_uid() when unmounting user runtime directory (RHEL-132175) - pid1: do not use generated strings as format strings (#19098) (RHEL-132317) - core/transaction: make merge_unit_ids() always return NUL-terminated string (RHEL-132317) - core/transaction: make merge_unit_ids() return non-NULL on success (RHEL-132317) - core/transaction: do not log "(null)" (RHEL-132317) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - journald-server: always create state file in signal handler (#2176892) - journald-server: move relinquish code into function (#2176892) - journald-server: always touch state file in signal handler (#2176892) - test: make TEST-35-LOGIN stable again (#2179309) - pager: set $LESSSECURE whenver we invoke a pager (#2175624) - test-login: always test sd_pid_get_owner_uid(), modernize (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (#2175624) - ci: trigger differential-shellcheck workflow on push (#2179309) - ci: codeql `master` -> `main` (#2179309) - test: ignore ENOMEDIUM error from sd_pid_get_cgroup() (#2175622) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - ci(Mergify): drop requirements on linting workflows (#2179309) - ci: workflow for gathering metadata for source-git automation (#2179309) - ci: first part of the source-git automation - commit linter (#2179309) - pstore: fix crash and forward dummy arguments instead of NULL (#2190151) - test: Disable LUKS devices from initramfs in QEMU tests (#2190151) - pstore: explicitly set the base when converting record ID (#2190151) - pstore: avoid opening the dmesg.txt file if not requested (#2190151) - test: add a couple of tests for systemd-pstore (#2190151) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - ci: update permissions for source-git automation workflows (#2179309) - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169932) - parse-util: in parse_permille() check negative earlier (#2178179) - tree-wide: increase granularity of percent specifications all over the place to permille (#2178179) - errno-util: introduce ERRNO_IS_TRANSIENT() (#2172846) - tree-wide: use ERRNO_IS_TRANSIENT() (#2172846) - libsystemd: ignore both EINTR and EAGAIN (#2172846) - sd-bus: handle -EINTR return from bus_poll() (#2172846) - stdio-bridge: don't be bothered with EINTR (#2172846) - sd-netlink: handle EINTR from poll() gracefully, as success (#2172846) - resolved: handle -EINTR returned from fd_wait_for_event() better (#2172846) - utmp-wtmp: fix error in case isatty() fails (#2172846) - utmp-wtmp: handle EINTR gracefully when waiting to write to tty (#2172846) - journal-vacuum: count size of all journal files (#2180380) - resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard" (#2156751) - resolved: close UDP socket when we received a network error on it (#2156751) - ci: allow RHEL-only labels to mark downstream-only commits (#2179309) - man: tweak markup in systemd-pstore.service(8) (#2217786) - man: add .service suffix to systemd-pstore(8) (#2217786) - presets: enable systemd-pstore.service by default (#2217786) - logind: simplify code (#2209328) - format-table: add TABLE_TIMESTAMP_UTC and _RELATIVE (#2156786) - loginctl: shorten variable name (#2156786) - loginctl: use bus_map_all_properties (#2156786) - loginctl: show session idle status in list-sessions (#2156786) - loginctl: list-sessions: fix timestamp for idle hint (#2156786) - loginctl: also show idle hint in session-status (#2156786) - core/timer: Always use inactive_exit_timestamp if it is set (#1719364) - timer: Use dual_timestamp_is_set() in one more place (#1719364) - ci: drop systemd-stable from advanced-commit-linter config (#2179309) - core/mount: escape invalid UTF8 char in dbus reply (#2158724) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - fd-util: rework how we determine highest possible fd (RHEL-18302) - basic/fd-util: refuse "infinite" loop in close_all_fds() (RHEL-18302) - fd-util: split out inner fallback loop of close_all_fds() as close_all_fds_without_malloc() (RHEL-18302) - exec-util: use close_all_fds_without_malloc() from freeze() (RHEL-18302) - ci: use source-git-automation composite Action (RHEL-1087) - ci: increase the cron interval to 45 minutes (RHEL-1087) - ci: add all Z-Stream versions to array of allowed versions (RHEL-1087) - tree-wide: always declare bitflag enums the same way (RHEL-2857) - login: Add KEY_RESTART handling (RHEL-2857) - analyze security: fix recursive call of syscall_names_in_filter() (RHEL-5991) - analyze-security: do not assign badness to filtered-out syscalls (RHEL-5991) - analyze-security: include an actual syscall name in the message (RHEL-5991) - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22426) - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-22426) - service: schedule cleanup of PID hashmaps when we now longer have main_pid and we are in container (RHEL-5863) - ci: Extend source-git-automation (RHEL-1087) - ci: add missing configuration for commit linter (RHEL-1087) - ci: add `Red Hat Enterprise Linux 8` to the list of supported products (RHEL-1087) - ci: enable source-git automation to validate reviews and ci results (RHEL-1087) - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1087) - ci: enable auto-merge GH Action (RHEL-1087) - fstab-generator: allow overriding /etc/fstab with $SYSTEMD_FSTAB (RHEL-1087) - fstab-generator: allow overriding path to /sysroot/etc/fstab too (RHEL-1087) - test: backport TEST-81-GENERATORS (fstab-generator only) (RHEL-1087) - resolved: actually check authenticated flag of SOA transaction (RHEL-6213) - login: add a missing error check for session_set_leader() (#2158167) - logind: reset session leader if we know for a fact that it is gone (#2158167) - test-login: skip consistency checks when logind is not active (#2223582) - sd-event: remove dead code and use _cleanup_ (#2211358) - sd-event: don't destroy inotify data structures from inotify event handler (#2211358) - sd-event: add sd_event_add_inotify_fd() call (#2211358) - test: add test case for self-destroy inotify handler (#2211358) - doc: add downstream CONTRIBUTING document (#2179309) - doc: use link with prefilled Jira issue (#2179309) - docs: link downstream CONTRIBUTING in README (#2179309) - unit drop-in: Fix ordering of special type.d drop-ins (#2156620) - Add failing test to show service.d global drop-in does not get overridden by more specific dropins (#2156620) - test: set indentation to 4 spaces (#2156620) - test/TEST-15: remove all created unit files (#2156620) - test: use quotes where necessary (#2156620) - tree-wide: drop manually-crafted message for missing variables (#2156620) - manager: reformat boolean expression in unit_is_pristine() (#2156620) - manager: allow transient units to have drop-ins (#2156620) - TEST-15: allow helper functions to accept other unit types (#2156620) - TEST-15: also test hierarchical drop-ins for slices (#2156620) - TEST-15: add test for transient units with drop-ins (#2156620) - TEST-15: add one more test for drop-in precedence (#2156620) - udev/net_id: introduce naming scheme for RHEL-8.9 (#2231846) - meson: remove libdw dependency from pstore (#2211416) - pstore: introduce tmpfiles.d/systemd-pstore.conf (#2211416) - tmpfiles: don't complain if we can't enable pstore in containers (#2211416) - pstore: don't enable crash_kexec_post_notifiers by default (#2211416) - core: when Delegate=yes is set for a unit, run ExecStartPre= and friends in a subcgroup of the unit (#2215925) - man: link Delegate= documentation up with the markdown docs (#2215925) - test-execute: let's ignore the difference between CLD_KILLED and CLD_DUMPED (RHEL-108744) - test-execute: turn off coredump generation in test services (RHEL-108744) - test: introduce TEST-53-TIMER (RHEL-108744) - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-108744) - test: check the next elapse timer timestamp after deserialization (RHEL-108744) - timer: don't run service immediately after restart of a timer (RHEL-108744) - Revert "test: extend testcase to ensure controller membership doesn't regress" (RHEL-9322) - cgroup-util: add mask definitions for sets of controllers supported by cgroupsv1 vs. cgroupsv2 (RHEL-9322) - cgroup: dump delegation mask too (RHEL-9322) - cgroup: units that aren't loaded properly should not result in cgroup controllers being pulled in (RHEL-9322) - cgroup: be more careful with which controllers we can enable/disable on a cgroup (RHEL-9322) - cgroup: extend reasons when we realize the enable mask (RHEL-9322) - cgroup: drastically simplify caching of cgroups members mask (RHEL-9322) - cgroup: when we unload a unit, also update all its parent's members mask (RHEL-9322) - test: extend testcase to ensure controller membership doesn't regress (RHEL-9322) - dbus: stash the subscriber list when we disconenct from the bus (RHEL-75081) - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-75081) - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-75081) - core: do not disconnect from bus when failed to install signal match (RHEL-75081) - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-75081) - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-75081) - core/manager: drop duplicate bus track deserialization (RHEL-75081) - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-77145) - Revert "man: fix description of --force in halt(8) (#7392)" (RHEL-81056) - man: explicitly document that "reboot -f" is different from "systemctl reboot -f" (RHEL-81056) - core: fix member access within null pointer (RHEL-76308) - ci: update actions/upload-artifact to `v4` (RHEL-32494) - ci: drop unused variable (RHEL-32494) - core: add possibility to not track certain unit types (RHEL-5877) - logind: don't setup idle session watch for lock-screen and greeter (RHEL-19215) - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-19215) - ci: point C8S containers to the Vault (RHEL-1087) - spec: do not create symlink /etc/systemd/system/syslog.service (RHEL-13179) - pid1: by default make user units inherit their umask from the user manager (RHEL-28048) - pam: add call to pam_umask (RHEL-28048) - ci: deploy systemd man to GitHub Pages (RHEL-32494) - ci(src-git): update list of supported products (RHEL-32494) - ci: add configuration for regression sniffer GA (RHEL-1087) - coredump: actually store parsed unit in the context (RHEL-18302) - resolved: limit the number of signature validations in a transaction (RHEL-26644) - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26644) - man: update link to RHEL documentation (RHEL-26355) - Warn “file changed as we read it” less often - Add downstream patch to fix related failure in filerem01 test - Fix CVE-2022-48303 - Resolves: CVE-2022-48303 - Remove the capabs_raw01 test from testsuite (#2066320) - Fix the --no-overwrite-dir option - added "padding with zeros" info message (#1913566) - do not report disk error as file shrank (#1913569) - fixed NULL return value from xgetcwd (#1837871) - drop BuildRequires: rsh, we anyways use ./configure RSH=%_bindir/ssh - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Return Epoch back - testsuite fixes per upstream reports - Backport fix for regression in the --no-overwrite-dir option fix (1.30-7) Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html - Warn “file changed as we read it” less often - Add downstream patch to fix related failure in filerem01 test - Fix CVE-2022-48303 - Resolves: CVE-2022-48303 - Remove the capabs_raw01 test from testsuite (#2066320) - Fix the --no-overwrite-dir option - added "padding with zeros" info message (#1913566) - do not report disk error as file shrank (#1913569) - fixed NULL return value from xgetcwd (#1837871) - drop BuildRequires: rsh, we anyways use ./configure RSH=%_bindir/ssh - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Return Epoch back - Backport upstream fix for CVE-2026-5704 (file injection hidden from -t) - Fix --one-top-level with absolute path (broken by the CVE-2025-45582 fix) Also fixes CVE-2026-18508 (escape from --one-top-level via hardlinks). - Upstream fix for build with libacl 2.4.0 - Backport upstream patches for CVE-2026-18477, fixes a bug where incremental restore with cyclic renames between backups may create a temporary directory at an archive-controlled path outside the extraction tree. The fix for CVE-2025-45582 already prevents exploiting this problem, so it is more a correctness and hardening change. - Backport upstream changes to jailify extraction directory Includes related gnulib changes to add openat2 Fixes CVE-2025-45582 - Backport fix for regression in the --no-overwrite-dir option fix (1.30-7) Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html - Warn “file changed as we read it” less often - Add downstream patch to fix related failure in filerem01 test - Fix CVE-2022-48303 - Resolves: CVE-2022-48303 - Remove the capabs_raw01 test from testsuite (#2066320) - Fix the --no-overwrite-dir option - added "padding with zeros" info message (#1913566) - do not report disk error as file shrank (#1913569) - fixed NULL return value from xgetcwd (#1837871) - drop BuildRequires: rsh, we anyways use ./configure RSH=%_bindir/ssh - Fix CVE-2022-48303 - Resolves: CVE-2022-48303 - Remove the capabs_raw01 test from testsuite (#2066320) - Fix the --no-overwrite-dir option - added "padding with zeros" info message (#1913566) - do not report disk error as file shrank (#1913569) - fixed NULL return value from xgetcwd (#1837871) - drop BuildRequires: rsh, we anyways use ./configure RSH=%_bindir/ssh - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Return Epoch back - testsuite fixes per upstream reports - rebase to latest upstream release, per release notes http://lists.gnu.org/archive/html/info-gnu/2017-12/msg00011.html - Updates to the gating tests from mhoyer - Update the gating tests - Fix the gating tests - Update to the latest upstream version - Update to the latest upstream version - Merge a fix to prevent a potential data leak when saving the config file - Update to new upstream version - Update to new upstream version - LIO should use /var/target for its runtime files - Remove support to qla2xxx - Reverted _module_build macro check which fixes systemtap probes on RHEL-8 Resolves: rhbz#1579386 - New version - Updated patches - Late arrival for mass rebuild for Fedora 28 - Rebuilt due to glibc dropping libieee Resolves: rhbz#1486352 - New version Resolves: rhbz#1476424 - use new _module_build macro to limit dependencies for Modularity - Rebuild for readline 7.x - Splitted documentation to the doc subpackage Resolves: rhbz#1380291 - Fixed whitespace - Dropped obsoleted defattr - New version Resolves: rhbz#1360516 - New version Resolves: rhbz#1359463 - Reverted _module_build macro check which fixes systemtap probes on RHEL-8 Resolves: rhbz#1579386 - New version - Updated patches - Late arrival for mass rebuild for Fedora 28 - Rebuilt due to glibc dropping libieee Resolves: rhbz#1486352 - New version Resolves: rhbz#1476424 - use new _module_build macro to limit dependencies for Modularity - Rebuild for readline 7.x - Splitted documentation to the doc subpackage Resolves: rhbz#1380291 - Fixed whitespace - Dropped obsoleted defattr - New version Resolves: rhbz#1360516 - New version Resolves: rhbz#1359463 - New version Resolves: rhbz#1359463 - New version Resolves: rhbz#1360516 - Splitted documentation to the doc subpackage Resolves: rhbz#1380291 - Fixed whitespace - Dropped obsoleted defattr - Rebuild for readline 7.x - use new _module_build macro to limit dependencies for Modularity - New version Resolves: rhbz#1476424 - Rebuilt due to glibc dropping libieee Resolves: rhbz#1486352 - Late arrival for mass rebuild for Fedora 28 - New version - Updated patches - Reverted _module_build macro check which fixes systemtap probes on RHEL-8 Resolves: rhbz#1579386 - resolves: RHEL-16507 - Update to version libtdb-1.4.9 - resolves: rhbz#2190421 - Rebuild to trigger distrobaker sync - resolves: rhbz#2190421 - Add missing tests to fix osci.brew-build.tier0.functional - resolves: rhbz#2190421 - Update to version 1.4.8 - resolves: rhbz#2132054 - Rebase to version 1.4.7 - resolves: rhbz#2077482 - Rebase to version 1.4.6 * resolves: rhbz#2013604 - Rebase to version 1.4.4 - Resolves: rhbz#1817565 - Rebase libtdb 1.4.3 for samba - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba - Related: rhbz#1754420 - Fix sssd tests (tdb) - Obsolete the python2 packages on upgrade - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8 - teamd: do no remove the ports on shutdown with -N [2148856] - teamd: stop iterating callbacks when a loop restart is requested [2148855] - libteamdctl: validate the bus name before using it [2065227] - Revert "teamd: Disregard current state when considering port enablement" [1874001] - 1.31 release - utils/bond2team: remove TYPE in ifcfg file [1858518] - utils/bond2team: keep delivering config to file if stdout not supplied [1858518] - teamd/lacp: silence ignore none LACP frames - Send LACP PDU right after the Actor state has been changed - Skip setting the same hwaddr to a lag port if not needed - Make all netlink socket RCVBUF sizes configurable - Don't return an error when timerfd socket return 0 - Fix ifinfo_link_with_port race condition with newlink - teamd: fix possible race in master ifname callback - 1.30 release - teamd: Disregard current state when considering port enablement [1851460] - teamd: fix ctx->hwaddr value assignment [1838952] - gating: fix the invalid ovs rpm link with latest version [1782427] - gating: fix the invalid ovs rpm link [1782427] - teamd/lacp: fix segfault due to NULL pointer dereference [1758073] - teamd: fix build error in expansion of macro teamd_log_dbgx [1758073] - teamd: update ctx->hwaddr after setting team dev to new hwaddr - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758073] - man teamd.conf: update some parameter default values [1732587] - 1.29 release - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops - initscripts: fix if/fi align - teamd: fix a json object memleak in get_port_obj() [1767685] - libteam: set netlink event socket as non-blocking [1684389] - libteam: double NETLINK_RCVBUF to fix -ENOMEM error - teamd: add a default value 1000 for link_watch.interval - gating: run VM with more RAM [1722449] - Remove time(1) manual page because it's provided by man-pages (bug #1612725) - Add time(1) manual page (bug #1612725) - 1.9 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Use upstream patch for POSIX mode - Silence compiler warnings - 1.8 bump - License changed from GPLv2+ to (GPLv3+ and GFDL) - Disable printing command failure in POSIX mode - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Package COPYING file as a license text (bug #1418528) - Search clock_gettime() also in rt library (bug #1004416) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - avoid getting stuck in infinite loop with new glib2 (#1450628) - update to 0.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - update to 0.4 (#1279760) - mask systemd-timedated service (#1244023) - rely on systemd preset in post scriptlet - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Fixed bogus date in %changelog Resolves: #1614366 - Fix incorrect URL and Source - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Backport fix for intermittent stalling bug Resolves: rhbz 2024339 - update to version 2.7, fixes rhbz #1486507 - removed upstreamed patches + spec modernization - added gcc as BR - Rebuild for new libevent - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to version 2.6 - Use hardened build - Fixes rhbz #1476851 tmux bell-action other not working - Fixes rhbz #1476892 tmux update in F26 broke tmuxinator - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New upstream release 2.5 - fixes rhbz #1449666 - https://raw.githubusercontent.com/tmux/tmux/2.5/CHANGES - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Added program descriptions to NAME sections in manual pages - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Rebase to 1.3.9.2 release. resolves: rhbz#1725781 - Make sure new manpages get installed. resolves: rhbz#1669892 - Fix annocheck warning resolves: rhbz#1624180 - Add CI gating support - tpm_version: remove garbled text resolves: rhbz#1669892 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Upstream release 1.3.9. - Add fixes for build errors with OpenSSL 1.1. - Add fixes for NULL cipher context use in seal/unseal. - spec file modernization. - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebase to 1.3.9.2 release. resolves: rhbz#1725781 - Make sure new manpages get installed. resolves: rhbz#1669892 - Fix annocheck warning resolves: rhbz#1624180 - Add CI gating support - tpm_version: remove garbled text resolves: rhbz#1669892 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Upstream release 1.3.9. - Add fixes for build errors with OpenSSL 1.1. - Add fixes for NULL cipher context use in seal/unseal. - spec file modernization. - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Fix memory leaks and double free resolves: rhbz#2041912 - Update tpm2-tss-devel BuildRequires resolves: rhbz#1855177 - Rebase to 2.3.3 release. resolves: rhbz#1855177 - Update CI gating to use test. resolves: rhbz#1682416 - Add initial CI gating. resolves: rhbz#1682416 - Rebase to release 2.1.1 resolves: rhbz#1664499 - Fix tpm2-abrmd-selinux Requires resolves: rhbz#1642000 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Download the distributed tarball instead of the source code tarball - Update URLs to point to the new project location - Update to 2.0.0 release - Don't install udev rule for TPM character devices - Initial import (rhbz#1550595) - Fix dependency resolves: rhbz#1628771 - Fix Requires issue. - Add initial CI gating support. resolves: rhbz#1642000, rhbz#1682415 - Rebase to 2.3.1 release resolves: rhbz#1898384 - Bump nvr to trigger osci. resolves: rhbz#1965981 - Fix CVE-2021-3565 resolves: rhbz#1965981 - Fix resource leak. - Fix to restrict policy digest size. - Fix incompatible pointer cast. - Fix error message in files_load_##name - Fix issue where execution couldn't reach function return. resolves: rhbz#1920821 - Fix ESYS_TR hierarchy transition. - Refactor fix_esys_hierarchies to return actual TSS2_RC return code. - tpm2_alg_util.c: fix a bug where the string rsa3072 wasn't being parsed. - tpm2_create.c: Fix an issue where userwithauth attr cleared if policy specified. - tpm2_hierarchycontrol: Fix bug where hierarchycontrol operation failed silently. - tpm2_nvdefine.c: Fix error reporting message. - tpm2_policyor: Fix silent failure for invalid/unspecified policy digest alg. resolves: rhbz#1854774 - Update to 4.1.1 release resolves: rhbz#1789682 - Update to 3.2.1 release resolves: rhbz#1725714 - Another dependency needed for CI gating resolves: rhbz#1682417 - Fix CI dependency resolves: rhbz#1682417 - Add CI gating test resolves: rhbz#1682417 - Add initial CI gating support resolves: rhbz#1682417 - Fix home directory of the tss user Related: RHEL-14439 - Ensure layer number is in bounds Resolves: rhbz#2160302 Resolves: rhbz#2162611 - Fix hmac calculation for tpm2_clear command. - Remove private implementation of strndup. resolves: rhbz#1920825 rhbz#1940861 - Add tss user if doesn't exist. - Update exported symbols map for libtss2-mu - esys: Check object handle node before calling compute_session_value - esys: fix resource name calculation - esys: fix Esys_StartAuthSession called with optional params - esys: fix keysize of ECC curve TPM2_ECC_NISTP224 - esys: fixup compute_encrypted_salt error handling - esys: use memcmp in byte array comparison - esys: zero out ctx->salt after startAuthSession_finish - mu: Remove use of VLAs for Marshalling TPML types - return proper error code on memory allocation failure - sys: match counter variable type for cmdAuthsArray->count - tcti-device: getPollHandles should allow num_handles query - tctildr: fix segmentation fault if name_conf is too big resolves: rhbz#1879071 rhbz#1855180 - Clean up libmandoc parser errors. resolves: rhbz#1789684 - Update to 2.3.2 release resolves: rhbz#1789684 - Add CI gating support resolves: rhbz#1682418 - Remove TCGL from spec license list. - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Re-enable ESAPI since gcrypt dependency is not an issue for Fedora - Bump release version to 2.0.0-2 - Fix home directory of the tss user Related: RHEL-14439 - Ensure layer number is in bounds Resolves: rhbz#2160302 Resolves: rhbz#2162611 - Fix hmac calculation for tpm2_clear command. - Remove private implementation of strndup. resolves: rhbz#1920825 rhbz#1940861 - Add tss user if doesn't exist. - Update exported symbols map for libtss2-mu - esys: Check object handle node before calling compute_session_value - esys: fix resource name calculation - esys: fix Esys_StartAuthSession called with optional params - esys: fix keysize of ECC curve TPM2_ECC_NISTP224 - esys: fixup compute_encrypted_salt error handling - esys: use memcmp in byte array comparison - esys: zero out ctx->salt after startAuthSession_finish - mu: Remove use of VLAs for Marshalling TPML types - return proper error code on memory allocation failure - sys: match counter variable type for cmdAuthsArray->count - tcti-device: getPollHandles should allow num_handles query - tctildr: fix segmentation fault if name_conf is too big resolves: rhbz#1879071 rhbz#1855180 - Clean up libmandoc parser errors. resolves: rhbz#1789684 - Update to 2.3.2 release resolves: rhbz#1789684 - Add CI gating support resolves: rhbz#1682418 - Remove TCGL from spec license list. - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Re-enable ESAPI since gcrypt dependency is not an issue for Fedora - Bump release version to 2.0.0-2 - Add poll option - Filter fixes. - Install kernelshark manpage with kernelshark subpackage, not with trace-cmd Resolves: rhbz#1678252 - added OSCI gating framework Resolves: rhbz#1682420 - The changes to the Makefile need to be applied from the specfile too. Resolves: rhbz#1601040 - trace-cmd-Makefile-Consistent-ELF-application-harden.patch Resolves: rhbz#1601040 - Remove the unsupported python2 plugin Resolves: rhbz#1589786 - Add trace-cmd flightrecorder services Resolves: rhbz#1574544 - Add python plugins - Update to 2.7 - Remove Groups tag - add gating.yaml - fix improper command line parsing (CVE-2023-46316) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - provide hardened build (#1330514) - Upgrade to 2.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - avoid consuming 100% CPU when running traceroute in loop (RHEL-71510) - add gating.yaml - fix improper command line parsing (CVE-2023-46316) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - provide hardened build (#1330514) - Upgrade to 2.1.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - fix programming mistakes detected by static analysis (#1602718) - Use LDFLAGS from redhat-rpm-config - add explicit BR for the gcc compiler - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - do not escape UTF-8 chars in file names by default in UTF-8 locale (#1480778) - modernize spec file (Group, BuildRoot, autosetup, clean, defattr) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - drop a non-upstream patch that disabled color output by default (#1284657) - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Fix home directory of the tss user Resolves: RHEL-9099 - Rebase to 0.3.15 - Fix CVE-2020-24330 CVE-2020-24331 CVE-2020-24332 resolves: rhbz#1725782 rhbz#1877517 rhbz#1882402 rhbz#1882414 - Fix annocheck warnings resolves: rhbz#1624181 - Add initial CI gating support - Fix covscan reported issues resolves: rhbz#1602719 - release mutex in error path for obj_context_set_machine_name resolves: rhbz#1614915 - Rebase to 3.14 release resolves: rhbz#1614915 - Rebuild with correct source checksum. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix home directory of the tss user Resolves: RHEL-9099 - Rebase to 0.3.15 - Fix CVE-2020-24330 CVE-2020-24331 CVE-2020-24332 resolves: rhbz#1725782 rhbz#1877517 rhbz#1882402 rhbz#1882414 - Fix annocheck warnings resolves: rhbz#1624181 - Add initial CI gating support - Fix covscan reported issues resolves: rhbz#1602719 - release mutex in error path for obj_context_set_machine_name resolves: rhbz#1614915 - Rebase to 3.14 release resolves: rhbz#1614915 - Rebuild with correct source checksum. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Don't start the gui if a display is not available - Revert removing distutils for rhel8 - Update the License tag in the specfile to the spdx version Resolves: RHEL-19179 - Remove deprecated distutils from setup - Adjust SPDX patch to accomdate the removed distutils Resolves: RHEL-19037 - Remove specfile from upstream source Resolves: RHEL-9197 - Fix show_threads --cgroups without a term Resolves: rhbz#2121518 - Adapt show_threads cgroup output to terminal size Resolves: rhbz#2121518 - Use f-strings in tuna where possible Resolves: rhbz#2120805 - Match irqs with "irqs/" Resolves: rhbz#2131353 - Replace dependency on python-ethtool with built-in functionality Resolves: rhbz#2123753 - Rebase to upstream version 0.18 Resolves: rhbz#2073555 - Add logging infrastructure to tuna - Add cleanlogs rule to Makefile Resolves: rhbz#2062882 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - post RC.1 fixes related: rhbz#2133814 - fixed possible traceback on SIGHUP - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - sap-hana forced latency to 70 us Resolves: RHEL-184274 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - post RC.1 fixes related: rhbz#2133814 - fixed possible traceback on SIGHUP - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - sap-hana forced latency to 70 us Resolves: RHEL-184274 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - post RC.1 fixes related: rhbz#2133814 - fixed possible traceback on SIGHUP - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - sap-hana forced latency to 70 us Resolves: RHEL-184274 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - post RC.1 fixes related: rhbz#2133814 - fixed possible traceback on SIGHUP - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - sap-hana forced latency to 70 us Resolves: RHEL-184274 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - post RC.1 fixes related: rhbz#2133814 - fixed possible traceback on SIGHUP - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - sap-hana forced latency to 70 us Resolves: RHEL-184274 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - new release - rebased tuned to latest upstream related: rhbz#2133814 - post RC.1 fixes related: rhbz#2133814 - fixed possible traceback on SIGHUP - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - new release - rebased tuned to latest upstream resolves: rhbz#2182119 - sap-hana: new profile sap-hana-kvm-guest resolves: rhbz#2173740 - serialized SIGHUP handler to prevent possible bootcmdline corruption resolves: rhbz#2215298 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - new release - api: fixed stop method not to require any parameter resolves: rhbz#2235638 - sap-hana forced latency to 70 us Resolves: RHEL-184274 - Make hdparm device checks lazy Resolves: RHEL-71457 - Disable the amd.scheduler plug-in instance in the postgresql profile Resolves: RHEL-70470 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66614 - sap-netweaver: increase vm.max_map_count resolves: RHEL-32124 - release bump due to broken c8s related: RHEL-27528 - release bump related: RHEL-27528 - profiles: added epyc-eda profile resolves: RHEL-27528 - new release - rebased tuned to latest upstream related: RHEL-17119 - renamed intel_uncore plugin to uncore - network-throughput: increased net.ipv4.tcp_rmem default value - new release - rebased tuned to latest upstream related: RHEL-17119 - lower CPU usage by using runtime=0 in profiles using scheduler plugin resolves: RHEL-6869 - new release - rebased tuned to latest upstream resolves: RHEL-17119 - print all arguments of failing commands in error messages - plugin_sysctl: added support for sysctl names with slash - tuned-adm: added support for moving devices between plugin instances - api: added methods for retrieval of plugin instances and devices - plugin_cpu: amd-pstate mentioned instead of just intel_pstate - hotplug: do not report ENOENT errors on device remove - plugin_sysctl: expand variables when reporting overrides - plugin_acpi: new plugin which handles ACPI platform_profile - plugin_bootloader: skip calling rpm-ostree kargs in no-op case - plugin_cpu: support cstate settings of pm_qos_resume_latency_us - scheduler: add option for ignoring IRQs affinity - plugin_intel_uncore: new plugin for uncore setting - Rebase to tzdata-2024a - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01. - Palestine will spring forward a week later than previously predicted. - Rebase to tzdata-2023d - Include time zone changes for Ittoqqortoormiit, Greenland and Vostok, Antarctica. - Update the expiration date for the leap-seconds.list file. No new leap seconds were added. - Bump release to test recent process changes. (RHEL-1326) - Rebase to tzdata-2023c - Lebanon reversed the change added in tzdata-2023b. - Rebase to tzdata-2023b - Lebanon will transition to DST on April 20/21, not March 25/26. - Rebase to tzdata-2023a - Egypt reintroduced DST, from April through October. - Morocco springs forward April 23, not April 30. - Palestine delayed the start of DST this year. - Include leap-seconds.list in tzdata install. (#2154109) - Rebase to tzdata-2022g - The northern edge of the Mexican state of Chihuahua will change time zone to agree with nearby US locations on 2022-11-30. - Added a new Zone America/Ciudad_Juarez that splits from America/Ojinaga. - Rebase to tzdata-2022f - Mexico will stop observing DST except near the US border. - Chihuahua moved to -06 year round starting on 2022-10-30. - Fiji no longer observes DST. - Rebase to tzdata-2022c - supersedes tzdata-2022b - Add a work-around for an awk bug in FreeBSD, macOS, etc. - Improve tzselect with respect to intercontinental Zones. - Bump release and rebuild to fix a build issue. - Add copyright, patch attribution and build dependencies for the previous commit. (RHEL-59542) - Harden against links to removed zones (RHEL-59542) - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Rebase to tzdata-2024a - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01. - Palestine will spring forward a week later than previously predicted. - Rebase to tzdata-2023d - Include time zone changes for Ittoqqortoormiit, Greenland and Vostok, Antarctica. - Update the expiration date for the leap-seconds.list file. No new leap seconds were added. - Bump release to test recent process changes. (RHEL-1326) - Rebase to tzdata-2023c - Lebanon reversed the change added in tzdata-2023b. - Rebase to tzdata-2023b - Lebanon will transition to DST on April 20/21, not March 25/26. - Rebase to tzdata-2023a - Egypt reintroduced DST, from April through October. - Morocco springs forward April 23, not April 30. - Palestine delayed the start of DST this year. Update to tzdata-2025a (RHEL-74309) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Bump release and rebuild to fix a build issue. - Add copyright, patch attribution and build dependencies for the previous commit. (RHEL-59542) - Harden against links to removed zones (RHEL-59542) - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Rebase to tzdata-2024a - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01. - Palestine will spring forward a week later than previously predicted. - Rebase to tzdata-2023d - Include time zone changes for Ittoqqortoormiit, Greenland and Vostok, Antarctica. - Update the expiration date for the leap-seconds.list file. No new leap seconds were added. - Bump release to test recent process changes. (RHEL-1326) - Rebase to tzdata-2023c - Lebanon reversed the change added in tzdata-2023b. - Rebase to tzdata-2023b - Lebanon will transition to DST on April 20/21, not March 25/26. - Update to tzdata-2025b (RHEL-84748) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74309) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Bump release and rebuild to fix a build issue. - Add copyright, patch attribution and build dependencies for the previous commit. (RHEL-59542) - Harden against links to removed zones (RHEL-59542) - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Rebase to tzdata-2024a - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01. - Palestine will spring forward a week later than previously predicted. - Rebase to tzdata-2023d - Include time zone changes for Ittoqqortoormiit, Greenland and Vostok, Antarctica. - Update the expiration date for the leap-seconds.list file. No new leap seconds were added. - Bump release to test recent process changes. (RHEL-1326) - Rebase to tzdata-2023c - Lebanon reversed the change added in tzdata-2023b. - Update to tzdata-2025c (RHEL-135159) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-102379) - Update to tzdata-2025b (RHEL-84748) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74309) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Bump release and rebuild to fix a build issue. - Add copyright, patch attribution and build dependencies for the previous commit. (RHEL-59542) - Harden against links to removed zones (RHEL-59542) - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Rebase to tzdata-2024a - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01. - Palestine will spring forward a week later than previously predicted. - Rebase to tzdata-2023d - Include time zone changes for Ittoqqortoormiit, Greenland and Vostok, Antarctica. - Update the expiration date for the leap-seconds.list file. No new leap seconds were added. - Update to tzdata-2026a (RHEL-154033) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135159) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-102379) - Update to tzdata-2025b (RHEL-84748) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74309) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Bump release and rebuild to fix a build issue. - Add copyright, patch attribution and build dependencies for the previous commit. (RHEL-59542) - Harden against links to removed zones (RHEL-59542) - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Rebase to tzdata-2024a - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01. - Palestine will spring forward a week later than previously predicted. - Update to tzdata-2026b (RHEL-170797) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2026a (RHEL-154033) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135159) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-102379) - Update to tzdata-2025b (RHEL-84748) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74309) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Bump release and rebuild to fix a build issue. - Add copyright, patch attribution and build dependencies for the previous commit. (RHEL-59542) - Harden against links to removed zones (RHEL-59542) - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Update to tzdata-2026c (RHEL-194104) - Alberta moved to permanent -06 on 2026-06-18. - Morocco moves to permanent +00 on 2026-09-20. - Update to tzdata-2026b (RHEL-170797) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2026a (RHEL-154033) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135159) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-102379) - Update to tzdata-2025b (RHEL-84748) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74309) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Bump release and rebuild to fix a build issue. - Add copyright, patch attribution and build dependencies for the previous commit. (RHEL-59542) - Harden against links to removed zones (RHEL-59542) - Update to tzdata-2026e (RHEL-262025) - Manitoba moves to permanent -05 on 2026-10-31. - Update to tzdata-2026d (RHEL-262025) - Canada's Northwest Territories moved to permanent -06 on 2026-08-21. - Obsolescent settings like TZ="EST5EDT" now conform better to POSIX. - Update to tzdata-2026c (RHEL-194104) - Alberta moved to permanent -06 on 2026-06-18. - Morocco moves to permanent +00 on 2026-09-20. - Update to tzdata-2026b (RHEL-170797) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2026a (RHEL-154033) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2025c (RHEL-135159) - Update leap seconds file expiration date - Included NEWS file with docs. (RHEL-102379) - Update to tzdata-2025b (RHEL-84748) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. Update to tzdata-2025a (RHEL-74309) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Bump release and rebuild to fix a build issue. - do not update currency.units from network during build - units_cur: validate rate data from server (#1598913) - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - use %{__python3} as the python interpreter - drop the dependency on python3-unidecode no longer used by units_cur - new upstream release - make units_cur work again (#1574835) - add explicit BR for the gcc compiler - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - make units_cur use Python 3 - new upstream release - Add environment variable that disables the zipbomb detection - Resolves: rhbz#2020320 Fix a false positive zipbomb detection Related: 1954649 Related: 1953565 * Fix out of memory errors while checking for zip-bombs Resolves: #1900915 - Update the man page with the new exit code introduced in 6.0-42 - Related: CVE-2019-13232 - Fix CVE-2019-13232 - Resolves: CVE-2019-13232 - Fix strcpy call with possibly overlapping src/dest strings. - Related: #1602721 - fix several possibly unterminated strings When copying to OEM_CP and ISO_CP strings, the string could end unterminated (stncpy does not append '\0'). - Related: #1602721 - Fix CVE-2018-18384 Resolves: CVE-2018-18384 - Fix CVE-2018-1000035 - heap based buffer overflow when opening password protected files. Resolves: 1537043 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Fix: Unzip Fails on Large Zip Files - Use the patch from Debian dealing with this Resolves: RHEL-45997 - Add environment variable that disables the zipbomb detection - Resolves: rhbz#2020320 Fix a false positive zipbomb detection Related: 1954649 Related: 1953565 * Fix out of memory errors while checking for zip-bombs Resolves: #1900915 - Update the man page with the new exit code introduced in 6.0-42 - Related: CVE-2019-13232 - Fix CVE-2019-13232 - Resolves: CVE-2019-13232 - Fix strcpy call with possibly overlapping src/dest strings. - Related: #1602721 - fix several possibly unterminated strings When copying to OEM_CP and ISO_CP strings, the string could end unterminated (stncpy does not append '\0'). - Related: #1602721 - Fix CVE-2018-18384 Resolves: CVE-2018-18384 - Fix CVE-2018-1000035 - heap based buffer overflow when opening password protected files. Resolves: 1537043 - Allow decompression of some wrongly compressed files Resolves: RHEL-86231 - Fix: Unzip Fails on Large Zip Files - Use the patch from Debian dealing with this Resolves: RHEL-45997 - Add environment variable that disables the zipbomb detection - Resolves: rhbz#2020320 Fix a false positive zipbomb detection Related: 1954649 Related: 1953565 * Fix out of memory errors while checking for zip-bombs Resolves: #1900915 - Update the man page with the new exit code introduced in 6.0-42 - Related: CVE-2019-13232 - Fix CVE-2019-13232 - Resolves: CVE-2019-13232 - Fix strcpy call with possibly overlapping src/dest strings. - Related: #1602721 - fix several possibly unterminated strings When copying to OEM_CP and ISO_CP strings, the string could end unterminated (stncpy does not append '\0'). - Related: #1602721 - Fix CVE-2018-18384 Resolves: CVE-2018-18384 - New 2.5.2 release - Use LDFLAGS from redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New 2.5.1 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Bump the release number to be higher than in Fedora 24 - Fix undefined behavior in config parser (rh #1352055) - Add the previously omitted systemd service file (rh #1352055) - Fix crash with invalid arguments (rh #1358472) - Update to a new release - Update to a new release - Install the rules into proper location - Bump the release number to be higher than in Fedora 24 - Update to a new release - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Update to a new release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to a new release - Fix python shebangs - add upstream fixes - New 010 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New 009 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Don't ship usbutils pkgconfig file - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Fix typo in pam-panel-icon manpage Do not use deprecated selinux API Do not use fexecve Resolves: #1775931 - Rebase to usermode-1.113 (fixes static scanner issues) Resolves #1602722 - Dropped need to run autotools - <sys/sysmacros.h> must be now included manually Resolves #1611752 - Fixed bad FSF address - Update to usermode-1.112 Resolves #1269643 - Added missing gcc dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix a FBFS with -Werror=format-security Resolves #1444750 - Fix inconsistent dates in %changelog - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix CI test package requirements - Resolves: bz #1682555 - Replace arch-dependent /usr/include/urcu/config.h with arch-independent stub when needed. (bz #1853168) - Added CI gating tests (bz #1682555) - Resolves: bz #1682555, #1853168 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - New upstream release - Re-add rpath removing - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - update atari partition tests (related to #2060030) - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - improve tmpfiles.d use in spec file (related to #2059241) - fix RHEL-134296 - libblkid: use snprintf() instead of sprintf() - fix RHEL-133946 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-117686 - lslogins: use sd_journal_get_data() in proper way - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix RHEL-18451 - logger: initialize socket credentials control union - fix RHEL-16070 - util-linux: issues in libblkid - fix RHEL-6274 - lslogins incorrect account expiration field - increment release number - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq - fix #2117355 - Add additional documentation for fstab - fix #2184728 - libuuid - downport cache related patch - fix #2188894 - The swapon man page of -p(priority) option shows incorrect. - fix #2227097 - wall(1) fail when trying to use seat0 - fix #2180413 - Backport hint about systemd daemon-reload - improve #2160321 - [last] ut->ut_user is not null terminated - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos - fix #2142496 - update upstream tests - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38 - fix #2160321 - [last] ut->ut_user is not null terminated - fix #2141969 - Add --cont-clock feature for libuuid and uuidd - Fixed return codes for vdoPrepareForLVM conversions. - Resolves: RHEL-65721 - Enabled vdoPrepareForLVM to check read-only devices. - Resolves: RHEL-65721 - Enhanced vdoPrepareForLVM to repair misaligned conversions. - Resolves: rhbz#2182739 - Updated vdoPrepareForLVM to allow LVM to use larger extents. - Resolves: rhbz#2182739 - Fixed excessive vdo2lvm "Retrying" messages. - Resolves: rhbz#1986595 - Fixed a pylint 2+ complaint in the vdo scripts. - Resolves: rhbz#2072131 - Updated vdo script documentation and help text for the uuid option. - Resolves: rhbz#2089957 - Added a tool to make LVMVDO pools read/write so that support and debugging tools may access them. - Resolves: rhbz#1999640 - Fixed bugs in the vdopreparelvm check to determine whether a device has already been converted. - Resolves: rhbz#2017843 - Fixed an issue in the vdo-by-dev tool which could result in a failure to start vdo devices when some devices in the vdo config file do not exist. - Resolves: rhbz#2022154 - Added a check to vdopreparelvm to determine whether it has already been converted. - Resolves: rhbz#2017843 - Renamed vdo2LVM to vdopreparelvm and moved its installation location to /usr/libexec so that it is not in common default paths as this utility is intended to be called from LVM, not directly by users. - Related: rhbz#1986930 - Fixed Coverity scan issues. - Resolves: rhbz#1982878 - Enhanced vdoPrepareForLVM to repair misaligned conversions. - Resolves: rhbz#2182739 - Updated vdoPrepareForLVM to allow LVM to use larger extents. - Resolves: rhbz#2182739 - Fixed excessive vdo2lvm "Retrying" messages. - Resolves: rhbz#1986595 - Fixed a pylint 2+ complaint in the vdo scripts. - Resolves: rhbz#2072131 - Updated vdo script documentation and help text for the uuid option. - Resolves: rhbz#2089957 - Added a tool to make LVMVDO pools read/write so that support and debugging tools may access them. - Resolves: rhbz#1999640 - Fixed bugs in the vdopreparelvm check to determine whether a device has already been converted. - Resolves: rhbz#2017843 - Fixed an issue in the vdo-by-dev tool which could result in a failure to start vdo devices when some devices in the vdo config file do not exist. - Resolves: rhbz#2022154 - Added a check to vdopreparelvm to determine whether it has already been converted. - Resolves: rhbz#2017843 - Renamed vdo2LVM to vdopreparelvm and moved its installation location to /usr/libexec so that it is not in common default paths as this utility is intended to be called from LVM, not directly by users. - Related: rhbz#1986930 - Fixed Coverity scan issues. - Resolves: rhbz#1982878 - Removed extraneous fields from the super block of a converted index. - Resolves: rhbz#1965546 - Added a parameter to the lvm conversion tool to specify the amount of space to free up. - Resolves: rhbz#1966827 - Fixed calculation of the number of expiring chapters in a converted index. - Resolves: rhbz#1975546 - Integrated the vdo to lvm conversion tool into the vdo management script and modified the tool itself to correctly convert the UDS index so that dedupe information is not lost by conversion. - Resolves: rhbz#1928284 - Fixed return codes for vdoPrepareForLVM conversions. - Resolves: RHEL-65721 - Enabled vdoPrepareForLVM to check read-only devices. - Resolves: RHEL-65721 - Enhanced vdoPrepareForLVM to repair misaligned conversions. - Resolves: rhbz#2182739 - Updated vdoPrepareForLVM to allow LVM to use larger extents. - Resolves: rhbz#2182739 - Fixed excessive vdo2lvm "Retrying" messages. - Resolves: rhbz#1986595 - Fixed a pylint 2+ complaint in the vdo scripts. - Resolves: rhbz#2072131 - Updated vdo script documentation and help text for the uuid option. - Resolves: rhbz#2089957 - Added a tool to make LVMVDO pools read/write so that support and debugging tools may access them. - Resolves: rhbz#1999640 - Fixed bugs in the vdopreparelvm check to determine whether a device has already been converted. - Resolves: rhbz#2017843 - Fixed an issue in the vdo-by-dev tool which could result in a failure to start vdo devices when some devices in the vdo config file do not exist. - Resolves: rhbz#2022154 - Added a check to vdopreparelvm to determine whether it has already been converted. - Resolves: rhbz#2017843 - Renamed vdo2LVM to vdopreparelvm and moved its installation location to /usr/libexec so that it is not in common default paths as this utility is intended to be called from LVM, not directly by users. - Related: rhbz#1986930 - Fixed Coverity scan issues. - Resolves: rhbz#1982878 - Enhanced vdoPrepareForLVM to repair misaligned conversions. - Resolves: rhbz#2182739 - Updated vdoPrepareForLVM to allow LVM to use larger extents. - Resolves: rhbz#2182739 - Fixed excessive vdo2lvm "Retrying" messages. - Resolves: rhbz#1986595 - Fixed a pylint 2+ complaint in the vdo scripts. - Resolves: rhbz#2072131 - Updated vdo script documentation and help text for the uuid option. - Resolves: rhbz#2089957 - Added a tool to make LVMVDO pools read/write so that support and debugging tools may access them. - Resolves: rhbz#1999640 - Fixed bugs in the vdopreparelvm check to determine whether a device has already been converted. - Resolves: rhbz#2017843 - Fixed an issue in the vdo-by-dev tool which could result in a failure to start vdo devices when some devices in the vdo config file do not exist. - Resolves: rhbz#2022154 - Added a check to vdopreparelvm to determine whether it has already been converted. - Resolves: rhbz#2017843 - Renamed vdo2LVM to vdopreparelvm and moved its installation location to /usr/libexec so that it is not in common default paths as this utility is intended to be called from LVM, not directly by users. - Related: rhbz#1986930 - Fixed Coverity scan issues. - Resolves: rhbz#1982878 - Removed extraneous fields from the super block of a converted index. - Resolves: rhbz#1965546 - Added a parameter to the lvm conversion tool to specify the amount of space to free up. - Resolves: rhbz#1966827 - Fixed calculation of the number of expiring chapters in a converted index. - Resolves: rhbz#1975546 - Integrated the vdo to lvm conversion tool into the vdo management script and modified the tool itself to correctly convert the UDS index so that dedupe information is not lost by conversion. - Resolves: rhbz#1928284 - Rebuild due to missing CI environment - Resolves: #2212772 #2193342 - patch: Delegate FIPS mode detection to configured crypto backend - patch: Disallow use of internal kenrel crypto driver names in "capi" - patch: Also disallow active devices with internal kernel names - patch: Fix init_by_name to allow unknown cipher format in dm-crypt - patch: Fix reencryption to fail properly for unknown cipher - patch: Fix activation of LUKS2 with capi format cipher and kernel - Resolves: #2212772 #2193342 - change cryptsetup-devel dependency from cryptsetup to cryptsetup-libs - Resolves: #2150254 - patch: Remove LUKS2 encryption data size restriction. - patch: Abort encryption when header and data devices are same. - Resolves: #2150254 - patch: Fix internal crypt segment compare routine - Resolves: #2110810 - patch: Fix cryptsetup --test-passphrase when device in reencryption - Resolves: #2058009 - update to cryptsetup 2.3.7 - fixes CVE-2021-4122 - patch: Fix suboptimal optimization in bundled argon2. - patch: Fix bogus memory allocation/device read with invalid LUKS2 headers - patch: Fix typo in luksRepair prompt. - Resolves: #2021815 #2022301 #2031859 - patch: Fix reencryption for custom devices with data segments set to use cipher_null. - Resolves: #1927409 - patch: Fix crypto backend to properly handle ECB mode. - Resolves: #1859091 - patch: Fix possible memory corruption in LUKS2 validation code in 32bit library. - Resolves: #1872294 - fix issue reported by covscan - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-1154 vim: use after free in utf_ptr2char - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c - CVE-2022-0413 vim: use after free in src/ex_cmds.c - fix test suite after fix for CVE-2022-0318 - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read - CVE-2021-4192 vim: vulnerable to Use After Free - 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0] - 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0] - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal - fix issue reported by covscan - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-1154 vim: use after free in utf_ptr2char - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c - CVE-2022-0413 vim: use after free in src/ex_cmds.c - fix test suite after fix for CVE-2022-0318 - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read - CVE-2021-4192 vim: vulnerable to Use After Free - RHEL-159620 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155428 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155412 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal - fix issue reported by covscan - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-1154 vim: use after free in utf_ptr2char - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c - CVE-2022-0413 vim: use after free in src/ex_cmds.c - fix test suite after fix for CVE-2022-0318 - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c - Relates: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass - Resolves: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159620 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155428 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155412 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal - fix issue reported by covscan - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-1154 vim: use after free in utf_ptr2char - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository - RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal - fix issue reported by covscan - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-1154 vim: use after free in utf_ptr2char - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c - CVE-2022-0413 vim: use after free in src/ex_cmds.c - fix test suite after fix for CVE-2022-0318 - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c - RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Relates: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass - Resolves: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159620 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155428 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155412 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal - fix issue reported by covscan - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - CVE-2022-1154 vim: use after free in utf_ptr2char - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Relates: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass - Resolves: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159620 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155428 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155412 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal - fix issue reported by covscan - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read - RHEL-186656 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave - RHEL-186648 CVE-2026-52858 vim: possible code execution with python3complete - CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178234 CVE-2026-46483 vim: command injection in tar plugin via shellescape - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Relates: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass - Resolves: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass - RHEL-159620 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - RHEL-155428 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155412 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-147935 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-112003 CVE-2025-53905 vim: Vim path traversial - RHEL-112007 CVE-2025-53906 vim: Vim path traversal - RHEL-253666 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215662 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215681 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215657 CVE-2026-52859 vim: out-of-bounds read in terminal cell.chars[] loop - CVE-2026-73072 vim: heap buffer overflow in set_sofo() - CVE-2026-73078 vim: code injection in netrw via bookmarks - CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-203873 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-194055 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() - RHEL-191365 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-203873 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-194055 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() - RHEL-191365 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192102 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings - RHEL-186656 CVE-2026-47162 vim: netrw code injection via NetrwBookHistSave - RHEL-186648 CVE-2026-52858 vim: possible code execution with python3complete - CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-178234 CVE-2026-46483 vim: command injection in tar plugin via shellescape - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-170126 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - Relates: RHEL-164956 vim: arbitrary command execution via modeline sandbox bypass - RHEL-271024 vim: vim: Ex command injection via crafted filename in sign_jump() - RHEL-257017 CVE-2026-73073 arbitrary Ex command execution during C omni-completion - RHEL-253666 CVE-2026-28420 buffer overflow in terminal emulator - RHEL-215662 CVE-2026-55892 vim: stack out-of-bounds write in dump_prefixes() - RHEL-215681 CVE-2026-59857 vim: stack out-of-bounds write in spell_soundfold_sal() - RHEL-215657 CVE-2026-52859 vim: out-of-bounds read in terminal cell.chars[] loop - CVE-2026-73072 vim: heap buffer overflow in set_sofo() - CVE-2026-73078 vim: code injection in netrw via bookmarks - CVE-2026-73076 vim: code execution via .VimballRecord file - RHEL-203873 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - Add support for CRI-O containers resolves: rhbz#2217407 - Add support for Alibaba cloud on aarch64 resolves: rhbz#2165518 - Add support for OCI containers resolves: rhbz#2155233 - Rebase to 1.25 resolves: rhbz#2118195 - Add guest detection for RHEL hypervisors resolves: rhbz#2076628 - Update patches to 1.22 - Support for Docker resolves: rhbz#2000834 - Support for VMware on aarch64 resolves: rhbz#1959154 - Add gating tests resolves: rhbz#1967094 - Rebuild for fixed binutils on aarch64 resolves: rhbz#1954455 - Fix crash on non-KVM platforms through incorrect use of CPUID related: rhbz#1756381 - Add Requires libvirt resolves: rhbz#1897130 - Prevent updates from previous versions from breaking resolves: rhbz#1782897 - Fix URL resolves: rhbz#1775565 - Fix vhostmd.conf related: rhbz#1689213 - Upstream version 1.1. - Remove patches, since all included 1.1. resolves: 1689213 - Add gating tests resolves: rhbz#1682784 - Include all upstream patches since 0.5. - Enable systemd init scripts (RHBZ#1592400). - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Remove ldconfig https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/ - Escape macros in %changelog - Add Requires libvirt resolves: rhbz#1897130 - Prevent updates from previous versions from breaking resolves: rhbz#1782897 - Fix URL resolves: rhbz#1775565 - Fix vhostmd.conf related: rhbz#1689213 - Upstream version 1.1. - Remove patches, since all included 1.1. resolves: 1689213 - Add gating tests resolves: rhbz#1682784 - Include all upstream patches since 0.5. - Enable systemd init scripts (RHBZ#1592400). - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild - Remove ldconfig https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/ - Escape macros in %changelog - Rebase to version 5.16 (#2149701) - Resolves: #1846110 - remove deprecated stanza in unit files - Rebase to watchdog 5.15. - Remove upstream patches. - Modify code to use libtirpc. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Scriptlets replaced with new systemd macros (#850364) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Related: #2140566, bring test over from Brew dist-git - Resolves: #2140566, which fails for long path - Resolves: #2044450 - custom profile generates shell error - Resolves: #2025709, check shell correctly - Resolves: #2009547, which treats function contents as aliases when parsing ksh - Related: #1940468, fixed unbound variable - Related: #1940468, fix error when the user runs which in bash with strict bash environment - Related: #1940468, fix regression if SHELL=zsh - Resolves: #1940468, fixed syntax error caused by testcase: a=b which ls Coverity issue - Fixed coverity issue - Resolves: #1768506, fix wrong alias - Add a check to ensure that /proc/$$/exe can be read thanks to mbliss@redhat.com for the report and the proposed patch Resolves: RHEL-101069 - Related: #2140566, bring test over from Brew dist-git - Resolves: #2140566, which fails for long path - Resolves: #2044450 - custom profile generates shell error - Resolves: #2025709, check shell correctly - Resolves: #2009547, which treats function contents as aliases when parsing ksh - Related: #1940468, fixed unbound variable - Related: #1940468, fix error when the user runs which in bash with strict bash environment - Related: #1940468, fix regression if SHELL=zsh - Resolves: #1940468, fixed syntax error caused by testcase: a=b which ls Coverity issue - Fixed coverity issue - fix #746416 - words contains "unltraconservative" - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Update to version 2.10 (rh #2042104) - restore WEP functionality (rh #2028839) - Update to latest upstream tree to include support for H2E Resolves: rhbz#2007333 - P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803) - Fix buffer overflow when processing P2P group information (CVE-2021-0326) - enable WPA-EAP-SUITE-B-192 (rh #1916394) - fix p2p_listen unexpectedly stopped after 5 seconds (rh #1693684) - allow changing 'bridge' via D-Bus (rh #1888050) - expose OWE configurability via D-Bus (rh #1888718) - Fix AP mode PMF disconnection protection bypass (CVE-2019-16275) - Fix NULL dereference in d-bus handler when P2P control interface is removed (rh #1752780) - enable WIFI_DISPLAY (rh #1755941) - Update to 2.9 upstream release - Enable OWE, SAE and DPP (rh #1730169) - Enable CI gating (rh #1682340) and add a basic selftest - Update to 2.7 upstream release - updated to 3.6ga5 (#1544168) - Build playback with LDFLAGS from redhat-rpm-config - Remove obsolete scriptlets - updated to 3.6ga4 (#1529910) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - updated to 3.5ga11 (#1465201) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - updated to 3.5ga10 (#1413799) - Rebuild for readline 7.x - updated to 3.6ga5 (#1544168) - Build playback with LDFLAGS from redhat-rpm-config - Remove obsolete scriptlets - updated to 3.6ga4 (#1529910) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - updated to 3.5ga11 (#1465201) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - updated to 3.5ga10 (#1413799) - Rebuild for readline 7.x - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - rebase to latest upstream release (rhbz#1405345) - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - add xz-devel BR and remove the patch1 (per rhbz#1295527) - update to 3.0.11 - remove 'autoreconf -vfi' call - update to 3.0.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x - Related: RHEL-11883 - xfsdump: restoring inventory prevents non-directory files being restored from tape - related: bz#2166554 - xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue - related: bz#2055289 - Fix bind mount vs root inode problems (#2020494) - Bump revision for test infrastructure (#1681970) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Build with largefile support on 32-bit platforms - xfsrestore: only process subtrees that are selected - Related: RHEL-31075, RHEL-179062 - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x - Related: RHEL-11883 - xfsdump: restoring inventory prevents non-directory files being restored from tape - related: bz#2166554 - xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue - related: bz#2055289 - Fix bind mount vs root inode problems (#2020494) - Bump revision for test infrastructure (#1681970) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Fix xfs_repair progress reporting is not working (#2183398) - Fix man page default for sparse mkfs option (#2118564) - Fix xfstest fails with error "missing xfsprogs fix patch"(#2161936,#2160746) - Fix ignore autofs mount table entries (#2182361) - xfsprogs: enable bigtime and inode btree counter features in RHEL8 (#2024201)) - xfs_quota: state command should report ugp grace time (#1949743) - xfs_repair: Use proper min/max values in compute_level_geometry (#1910384) - xfs_quota: document how the default quota is stored (#1850188) - xfs_db: skip type change if type_f unchanged (#1867474) - xfs_repair: improve AG btree ptr validation (libxfs_verify_agbno) (#1887288) - mkfs.xfs: fix ASSERT on too-small device with stripe geometry (#1887401) - xfs_repair: fix rebuilding btree block less than minrecs (#1759452) - xfs_quota: allow individual timer extension (#1899204) - mkfs.xfs: inform user about discard, and make interruptable (#1836414) - mkfs.xfs: use faster log zeroing on supported devices (#1755046) - Fix xfs_repair progress reporting is not working (#2183398) - Fix man page default for sparse mkfs option (#2118564) - Fix xfstest fails with error "missing xfsprogs fix patch"(#2161936,#2160746) - Fix ignore autofs mount table entries (#2182361) - xfsprogs: enable bigtime and inode btree counter features in RHEL8 (#2024201)) - xfs_quota: state command should report ugp grace time (#1949743) - xfs_repair: Use proper min/max values in compute_level_geometry (#1910384) - xfs_quota: document how the default quota is stored (#1850188) - xfs_db: skip type change if type_f unchanged (#1867474) - xfs_repair: improve AG btree ptr validation (libxfs_verify_agbno) (#1887288) - mkfs.xfs: fix ASSERT on too-small device with stripe geometry (#1887401) - xfs_repair: fix rebuilding btree block less than minrecs (#1759452) - xfs_quota: allow individual timer extension (#1899204) - mkfs.xfs: inform user about discard, and make interruptable (#1836414) - mkfs.xfs: use faster log zeroing on supported devices (#1755046) - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - add /etc/sgml ownership to xml-common subpackage (#1173925) - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Use /usr/bin instead of /bin in Requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Package and catalog xmldsig-core-schema.xsd, XMLSchema.dtd, and datatypes.dtd - add basic manpages for sgml.conf(5) and sgmlwhich(1) (#1613279) - Prevent integer overflow or wraparound, CVE-2024-4549 (RHEL-57519) - Address segfault found in CVE-2023-52425 (RHEL-24226) - Address some Coverity issues in the patch set - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (CVE-2021-46143) (#2058560) - Add missing validation of encoding (CVE-2022-25235) (#2070481) - Backport upstream fix for console spam with debug messages (#1541868) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - BuildRequire openssl by pkgconfig() - Update to 1.51.0 - Fix HTML injection in Abyss HTTP server responses CVE-2026-15928 - Restrict XML Entity Expansion Depth in libexpat CVE-2024-8176 - Prevent integer overflow or wraparound, CVE-2024-4549 (RHEL-57519) - Address segfault found in CVE-2023-52425 (RHEL-24226) - Address some Coverity issues in the patch set - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (CVE-2021-46143) (#2058560) - Add missing validation of encoding (CVE-2022-25235) (#2070481) - Backport upstream fix for console spam with debug messages (#1541868) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Restrict XML Entity Expansion Depth in libexpat CVE-2024-8176 - Prevent integer overflow or wraparound, CVE-2024-4549 (RHEL-57519) - Address segfault found in CVE-2023-52425 (RHEL-24226) - Address some Coverity issues in the patch set - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (CVE-2021-46143) (#2058560) - Add missing validation of encoding (CVE-2022-25235) (#2070481) - Backport upstream fix for console spam with debug messages (#1541868) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - BuildRequire openssl by pkgconfig() - Address some Coverity issues in the patch set - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (CVE-2021-46143) (#2058560) - Add missing validation of encoding (CVE-2022-25235) (#2070481) - Backport upstream fix for console spam with debug messages (#1541868) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - BuildRequire openssl by pkgconfig() - Update to 1.51.0 - Fix Requires.private in xmlrpc_server++.pc - Update to 1.49.02 - Address segfault found in CVE-2023-52425 (RHEL-24226) - Address some Coverity issues in the patch set - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (CVE-2021-46143) (#2058560) - Add missing validation of encoding (CVE-2022-25235) (#2070481) - Backport upstream fix for console spam with debug messages (#1541868) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - BuildRequire openssl by pkgconfig() - Update to 1.51.0 - Fix Requires.private in xmlrpc_server++.pc - Prevent integer overflow or wraparound, CVE-2024-4549 (RHEL-57519) - Address segfault found in CVE-2023-52425 (RHEL-24226) - Address some Coverity issues in the patch set - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (CVE-2021-46143) (#2058560) - Add missing validation of encoding (CVE-2022-25235) (#2070481) - Backport upstream fix for console spam with debug messages (#1541868) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - BuildRequire openssl by pkgconfig() - Update to 1.51.0 - Fix HTML injection in Abyss HTTP server responses CVE-2026-15928 - Restrict XML Entity Expansion Depth in libexpat CVE-2024-8176 - Prevent integer overflow or wraparound, CVE-2024-4549 (RHEL-57519) - Address segfault found in CVE-2023-52425 (RHEL-24226) - Address some Coverity issues in the patch set - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (CVE-2021-46143) (#2058560) - Add missing validation of encoding (CVE-2022-25235) (#2070481) - Backport upstream fix for console spam with debug messages (#1541868) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Restrict XML Entity Expansion Depth in libexpat CVE-2024-8176 - Prevent integer overflow or wraparound, CVE-2024-4549 (RHEL-57519) - Address segfault found in CVE-2023-52425 (RHEL-24226) - Address some Coverity issues in the patch set - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (CVE-2021-46143) (#2058560) - Add missing validation of encoding (CVE-2022-25235) (#2070481) - Backport upstream fix for console spam with debug messages (#1541868) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - BuildRequire openssl by pkgconfig() - Address some Coverity issues in the patch set - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (CVE-2021-46143) (#2058560) - Add missing validation of encoding (CVE-2022-25235) (#2070481) - Backport upstream fix for console spam with debug messages (#1541868) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - BuildRequire openssl by pkgconfig() - Update to 1.51.0 - Fix Requires.private in xmlrpc_server++.pc - Update to 1.49.02 - Address segfault found in CVE-2023-52425 (RHEL-24226) - Address some Coverity issues in the patch set - lib: Prevent more integer overflows (CVE-2022-22822 to CVE-2022-22827) (#2058567, #2058576, #2058582, #2058589, #2058595, #2058602) - Prevent integer overflow on m_groupSize in doProlog (CVE-2021-46143) (#2058560) - Add missing validation of encoding (CVE-2022-25235) (#2070481) - Backport upstream fix for console spam with debug messages (#1541868) - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - BuildRequire openssl by pkgconfig() - Update to 1.51.0 - Fix Requires.private in xmlrpc_server++.pc - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271 - fix annocheck failures on i686 (rhbz#1630650) - drop ppc64p7 hack, per fedora devel list discussion: https://lists.fedoraproject.org/archives/list/ devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/ - don't explicitly set _FILE_OFFSET_BITS, package uses AC_SYS_LARGEFILE - rebase to 5.2.4 (rhbz#1574039), per release notes: https://www.mail-archive.com/xz-devel@tukaani.org/msg00295.html - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Cleanup spec - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271 - fix annocheck failures on i686 (rhbz#1630650) - drop ppc64p7 hack, per fedora devel list discussion: https://lists.fedoraproject.org/archives/list/ devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/ - don't explicitly set _FILE_OFFSET_BITS, package uses AC_SYS_LARGEFILE - rebase to 5.2.4 (rhbz#1574039), per release notes: https://www.mail-archive.com/xz-devel@tukaani.org/msg00295.html - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Cleanup spec - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271 - fix annocheck failures on i686 (rhbz#1630650) - drop ppc64p7 hack, per fedora devel list discussion: https://lists.fedoraproject.org/archives/list/ devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/ - don't explicitly set _FILE_OFFSET_BITS, package uses AC_SYS_LARGEFILE - rebase to 5.2.4 (rhbz#1574039), per release notes: https://www.mail-archive.com/xz-devel@tukaani.org/msg00295.html - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Switch to %ldconfig_scriptlets - Cleanup spec - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - AlmaLinux changes - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245) - Fix japanese translations (RHEL-6393) - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786) - Document symbols in `dnf history list` output (RhBug:2172067) - Return an error when transaction fails (RhBug:2170093) - Omit src RPMs from check-update (RhBug:2151910,2203069) - automatic: Fix online detection with proxy (RhBug:2022440,2189851) - Update translations - Ignore processing variable files with unsupported encoding (RhBug:2141215) - Better explain traceback of rpm.error with dnf - Document changes to offline-upgrade command (RhBug:1939975,2139324) - Add support for rollback of group upgrade rollback (RhBug:2016070) - Move system-upgrade plugin to core (RhBug:2054235) - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309) - Allow passing plugin parameters with dashes in names (RhBug:1980712) - Fix upgrade from file to noarch pkg (RhBug:2006018) - Add support for group upgrade rollback (RhBug:2016070) - Expose plugin unload method to API (RhBug:2047251) - Add doc related to --destdir and --downloadonly options (RhBug:2100811) - Set default value for variable to prevent crash (RhBug:2091636) - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421) - Added patch for almalinux bugtracker - automatic: catch OSError, not SMTPException on smtp errors (RHEL-71545) - automatic: Check availability of config file (RHEL-71545) - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245) - Fix japanese translations (RHEL-6393) - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786) - Document symbols in `dnf history list` output (RhBug:2172067) - Return an error when transaction fails (RhBug:2170093) - Omit src RPMs from check-update (RhBug:2151910,2203069) - automatic: Fix online detection with proxy (RhBug:2022440,2189851) - Update translations - Ignore processing variable files with unsupported encoding (RhBug:2141215) - Better explain traceback of rpm.error with dnf - Document changes to offline-upgrade command (RhBug:1939975,2139324) - Add support for rollback of group upgrade rollback (RhBug:2016070) - Move system-upgrade plugin to core (RhBug:2054235) - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309) - Add microcode_ctl to a reboot list (RHEL-17356) - Fix for strange issue with binary garbage in smaps files (RHEL-6392, RhBug:2212953) - Add patch: Fix zlib reboot requirement (RhBug:2092033) - Add fix and test assertion for "no systemd unit exists for pid" - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2208444) - versionlock: Use only the most specific NEVRA (RhBug:1961217) - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157) - Doc update for reposync (RhBug:2132383,2182004) - reposync: Implement --safe-write-path option (RhBug:1898089,2203766) - Update translations - Show downstream warning during system-upgrade - offline-upgrade: add support for security filters (RhBug:1939975,2139324) - Move system-upgrade plugin to core (RhBug:2054235) - Move system-upgrade plugin to core (RhBug:2054235) - Set the ziperr function as noreturn - Fix email in the previous chnagelog entry - Related: #1602741 - Add missing linker flags - Port the configure patch from unzip that allows linker flags configuration from the spec file - Related: #1624188 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - Add missing %license macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - Added requirement for unzip (#1235956) - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - Fix the Crash in zlib deflateBound() function on s390x - Resolves: BZ#2193045 - Resolve fuzzing issue for unknown memory access - Rebased Power 8 optimization patches - Fix for Unnecessary IFUNC resolver for crc32_z - Fix for python3.11 broken libxml2 and lxml on s390x - Inflate small window optimization for IBM z15 rhbz#2154775 - Fix for IBM strm.adler rhbz#2134074 - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434 - Apply IBM patch for compressBound() function - Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824 - Resolves: #2056900 - Resolves: CVE-2018-25032 - Fixed DFLTCC compression level switching issues (#1875492) - Enabled HW compression for compression levels 1 through 6 (#1847438) - Fixed inflateSyncPoint() bad return value on z15 (#1888930) - Permit a deflateParams() parameter change - Another fix for Z hardware-accelerated deflate for s390x architectures - according to previous change by upstream - Fix the Crash in zlib deflateBound() function on s390x - Resolves: BZ#2193045 - Resolve fuzzing issue for unknown memory access - Rebased Power 8 optimization patches - Fix for Unnecessary IFUNC resolver for crc32_z - Fix for python3.11 broken libxml2 and lxml on s390x - Inflate small window optimization for IBM z15 rhbz#2154775 - Fix for IBM strm.adler rhbz#2134074 - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434 - Apply IBM patch for compressBound() function - Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824 - Resolves: #2056900 - Resolves: CVE-2018-25032 - Fixed DFLTCC compression level switching issues (#1875492) - Enabled HW compression for compression levels 1 through 6 (#1847438) - Fixed inflateSyncPoint() bad return value on z15 (#1888930) - Permit a deflateParams() parameter change - Another fix for Z hardware-accelerated deflate for s390x architectures - according to previous change by upstream - make zsh wait built-in wait properly for all active child processes (#2070342) - do not perform PROMPT_SUBST evaluation on file.file/%K arguments (CVE-2021-45444) - improve printing of error messages introduced by the fix of CVE-2019-20044 - drop privileges securely when unsetting PRIVILEGED option (CVE-2019-20044) - return non-zero exit status on nested parse error (#1654989) - fix programming mistakes detected by static analysis (#1602743) - fix two security issues in shebang line parsing (CVE-2018-0502 CVE-2018-13259) - Rebuild with fixed binutils - Rebuilt for gdbm - update to latest upstream release